exploit-db-mirror/exploits/unix/remote/21853.txt
Offensive Security 36c084c351 DB: 2021-09-03
45419 changes to exploits/shellcodes

2 new exploits/shellcodes

Too many to list!
2021-09-03 13:39:06 +00:00

5 lines
No EOL
424 B
Text

source: https://www.securityfocus.com/bid/5786/info
The servlet 'org.apache.catalina.servlets.DefaultServlet' is included with Apache Tomcat by default. It is possible to use this servlet to view contents of files within the webroot. This includes JSP source code, which may contain sensitive data such as database usernames and passwords.
http://target/admin/servlet/org.apache.catalina.servlets.DefaultServlet/target.jsp