Exploitation Summary
EIP tracks 1 public exploit for CVE-1999-1130. PoCs published by David Litchfield.
AI-analyzed exploit summary The writeup describes an information disclosure vulnerability in Netscape Enterprise Server 3.51+ where crafted search queries can bypass default settings to expose full text of JHTML or scripted files. It provides example URLs demonstrating the exploit mechanism.
Description
Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read the source of JHTML files by specifying a search command using the HTML-tocrec-demo1.pat pattern file.
Exploits (1)
The writeup describes an information disclosure vulnerability in Netscape Enterprise Server 3.51+ where crafted search queries can bypass default settings to expose full text of JHTML or scripted files. It provides example URLs demonstrating the exploit mechanism.