5 lines
No EOL
427 B
Text
5 lines
No EOL
427 B
Text
source: http://www.securityfocus.com/bid/5786/info
|
|
|
|
The servlet 'org.apache.catalina.servlets.DefaultServlet' is included with Apache Tomcat by default. It is possible to use this servlet to view contents of files within the webroot. This includes JSP source code, which may contain sensitive data such as database usernames and passwords.
|
|
|
|
http://target/admin/servlet/org.apache.catalina.servlets.DefaultServlet/target.jsp |