CVE

Id
41964  
CVE No.
CVE-2009-4529  
Status
Candidate  
Description
InterVations NaviCOPA Web Server 3.0.1.2 and earlier allows remote attackers to obtain the source code for a web page via a trailing encoded space character in a URI, as demonstrated by /index.html%20 and /index.php%20 URIs.  
Phase
Assigned (20091231)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
459818 41964 CVE-2009-4529 MISC:http://freetexthost.com/n5l0h34pxc  View
459819 41964 CVE-2009-4529 MISC:http://pocoftheday.blogspot.com/2009/10/navicopa-web-server-3012-remote-source.html  View
459820 41964 CVE-2009-4529 MISC:http://www.packetstormsecurity.org/0910-exploits/navicopa-disclose.txt  View
459821 41964 CVE-2009-4529 BID:36705  View
459822 41964 CVE-2009-4529 URL:http://www.securityfocus.com/bid/36705  View
459823 41964 CVE-2009-4529 OSVDB:58949  View
459824 41964 CVE-2009-4529 URL:http://osvdb.org/58949  View
459825 41964 CVE-2009-4529 SECUNIA:37014  View
459826 41964 CVE-2009-4529 URL:http://secunia.com/advisories/37014  View
459827 41964 CVE-2009-4529 VUPEN:ADV-2009-2927  View
459828 41964 CVE-2009-4529 URL:http://www.vupen.com/english/advisories/2009/2927  View
459829 41964 CVE-2009-4529 XF:navicopa-source-information-disclosure(53799)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44263 JVNDB-2009-005270 Drupal 用の Webform モジュールにおけるセッション変数を読み取られる脆弱性 Drupal 用の Webform モジュールは、デフォルト値へのトークンプレイスホルダーを含むページのキャッシングを防止しないため、セッション変数を読み取られる脆弱性が存在します。 CVE-2009-4533 41964 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005270.html  View