CVE-2008-6528
TmaxSoft JEUS 5 - Unauthenticated Source Code Disclosure via NTFS Alternate Data Stream
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-6528. PoCs published by Simon Ryeo.
AI-analyzed exploit summary This is a writeup describing a vulnerability in TmaxSoft JEUS where Alternate Data Streams (ADS) on NTFS can be exploited to disclose web application source files. The exploit involves appending '::$DATA' to a file request, bypassing normal file handling.
Description
NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by appending ::$DATA to the URL, which accesses the alternate data stream.
Exploits (1)
This is a writeup describing a vulnerability in TmaxSoft JEUS where Alternate Data Streams (ADS) on NTFS can be exploited to disclose web application source files. The exploit involves appending '::$DATA' to a file request, bypassing normal file handling.