7 lines
No EOL
488 B
Text
7 lines
No EOL
488 B
Text
source: http://www.securityfocus.com/bid/977/info
|
|
|
|
Appending "%00" to the end of a CGI script filename will permit a remote client to view full contents of the script if the CGI module option "allow CGIs anywhere" is enabled. Scripts located in directories which are designated as executable (eg. \cgi-bin) are not vulnerable to this exploit.
|
|
|
|
http ://target/script.cgi%00
|
|
|
|
"%00" may be replaced with "%G0", "%W0", "%EW", "%FG", "%UW", or "%VG" in order to achieve the same results. |