Exploitation Summary
EIP tracks 1 public exploit for CVE-2002-1603. PoCs published by Luigi Auriemma.
AI-analyzed exploit summary The exploit describes a path traversal vulnerability in GoAhead webserver that allows source code disclosure of ASP files by appending specific characters to HTTP requests. No actual exploit code is provided, only examples of malicious URLs.
Description
GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, \, %2f (encoded /), %20 (encoded space), or %00 (encoded null) character, which returns the ASP source code unparsed.
Exploits (1)
The exploit describes a path traversal vulnerability in GoAhead webserver that allows source code disclosure of ASP files by appending specific characters to HTTP requests. No actual exploit code is provided, only examples of malicious URLs.