medium5.0Public exploit code
CVE-2001-0200
HSWeb 2.0 HTTP server allows remote attackers to obtain the physical path of the server via a request to the /cgi/ directory, which will list the path if direc…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Heat-On HSWeb Web Server 2.0 - Full Path Disclosure2001-02-04 · remote · cgi · Verified
Impact
HSWeb 2.0 HTTP server allows remote attackers to obtain the physical path of the server via a request to the /cgi/ directory, which will list the path if directory browsing is enabled.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Heat-On Software | Hsweb | Version 2.0 |