vendor:
Baby Web Server
by:
ZoRLu
7,5
CVSS
HIGH
Arbitrary File Disclosure
200
CWE
Product Name: Baby Web Server
Affected Version From: 2.7.2.0
Affected Version To: 2.7.2.0
Patch Exists: YES
Related CWE: N/A
CPE: a:baby_web_server:baby_web_server:2.7.2.0
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2009
Baby Web Server 2.7.2.0 Arbitrary File Disclosure Exploit
This exploit allows an attacker to read arbitrary files on the vulnerable server. It is triggered by sending a specially crafted HTTP request to the vulnerable server. The exploit was tested on Baby Web Server 2.7.2.0.
Mitigation:
Upgrade to the latest version of Baby Web Server.