• info
• discussion
• exploit
• solution
• references

SurgeLDAP Path Disclosure Vulnerability

There is no exploit required. The following example was submitted:

http://www.example.com:6680/aaa.html