ASP Source Code Disclosure in Quick 'n Easy Web Server and Baby ASP Web Server

CVE-2006-1391

What is CVE-2006-1391?

The Quick 'n Easy Web Server prior to version 3.1.1 and Baby ASP Web Server version 2.7.2 are vulnerable to an attack that allows remote attackers to retrieve the source code of ASP files. This exploitation can be performed by appending certain characters, specifically dots or spaces, in the URL of the request. As a result, this vulnerability could potentially expose sensitive information and application logic, leading to further attacks on the web application.

References