SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

OVAL

IIS ASP Source Code Access Vulnerability

ID: oval:org.mitre.oval:def:913	Date: (C)2004-05-04 (M)2018-05-03
Class: VULNERABILITY	Family: windows

In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL.

Platform:

Microsoft Windows NT

Product:

Microsoft Internet Information Server (IIS)

Reference:

CVE-1999-0278