astral

1 exploit Active since Oct 2001
CVE-2001-0778 EXPLOITDB text WORKING POC
OmniHTTPd < 2.0.8 - Unauthenticated Source Code Disclosure via URL-Encoded Space
OmniHTTPd 2.0.8 and earlier allow remote attackers to obtain source code via a GET request with the URL-encoded symbol for a space (%20).