source: http://www.securityfocus.com/bid/12451/info
RaidenHTTPD is reported prone to a remote file disclosure vulnerability. It is reported that the service does not correctly handle requests for restricted files that reside outside of the web document root folder.
A remote attacker may exploit this issue to disclose the contents of web server readable files.
GET windows/system.ini HTTP/1.1
Host: localhost
京公网安备 11010502034610号
暂无评论