showcode.asp
advICE :Intrusions : 2002678

Summary

A URL allowing access to arbitrary server files has been seen.

Details

The showcode.asp sample file shipped with Microsoft Internet Information Server (IIS) 4.0 and SiteServer 3.x can be remotely exploited to read arbitrary files on vulnerable servers. This file is one of several sample files distributed with IIS 4.0 and SiteServer 3.x that allow remote file viewing.

parametric information URL The suspicious URL. accessed Indicates whether the URL was successfully accessed. code The HTTP return code. arg The argument to the GET command (if any).

 
Version appeared: 3.5