CVE-2006-1391

Medium

Description

The (a) Quick 'n Easy Web Server before 3.1.1 and (b) Baby ASP Web Server 2.7.2 allows remote attackers to obtain the source code of ASP files via (1) . (dot) and (2) space characters in the extension of a URL.

SeverityMedium
CVSS5.0
Exploit probability—
ProductPablo Software Solutions Baby Asp Web Server
PublishedMar 25, 2006
First seenMar 25, 2006

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
pablo_software_solutions baby_asp_web_server2.7.2—
pablo_software_solutions quick_and_easy_web_server3.0.6, 3.1.0—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.