CVE-2009-4535

This is a writeup describing directory traversal vulnerabilities in Mongoose Web Server v2.8. It provides example URLs demonstrating the vulnerability but does not include executable exploit code.

This exploit demonstrates a remote source disclosure vulnerability in Mongoose Web Server <= 2.8.0. By appending a trailing slash to a file request, the server reveals the source code of the file instead of executing it.