medium5.0Public exploit code
CVE-2009-3544
Xerver HTTP Server 4.32 allows remote attackers to obtain the source code for a web page via an HTTP request with the addition of ::$DATA after the HTML file n…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Xerver HTTP Server 4.32 - Arbitrary Source Code Disclosure2009-09-11 · remote · windows · Verified
Impact
Xerver HTTP Server 4.32 allows remote attackers to obtain the source code for a web page via an HTTP request with the addition of ::$DATA after the HTML file name.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xerver | Xerver | Version 4.32 |