Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-6104. PoCs published by jose.palanco.
AI-analyzed exploit summary The provided text describes a source code information-disclosure vulnerability in XSP due to improper input sanitization. An attacker can exploit this to retrieve arbitrary files from the vulnerable system by appending a space character to the URL.
Description
The System.Web class in the XSP for ASP.NET server 1.1 through 2.0 in Mono does not properly verify local pathnames, which allows remote attackers to (1) read source code by appending a space (%20) to a URI, and (2) read credentials via a request for Web.Config%20.
Exploits (1)
The provided text describes a source code information-disclosure vulnerability in XSP due to improper input sanitization. An attacker can exploit this to retrieve arbitrary files from the vulnerable system by appending a space character to the URL.