• info
• discussion
• exploit
• solution
• references

Lighttpd mod_userdir Information Disclosure Vulnerability

To exploit this vulnerability, attackers can use a browser.

The following example URI is available:

http://www.example.com/~nobody/etc/passwd