CVE-2009-4535
Mongoose < 2.8.0 - Unauthenticated Source Code Exposure via URI Trailing Slash
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2009-4535. PoCs published by Dr_IDE.
AI-analyzed exploit summary This is a writeup describing directory traversal vulnerabilities in Mongoose Web Server v2.8. It provides example URLs demonstrating the vulnerability but does not include executable exploit code.
Description
Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending a / (slash) character to the URI.
Exploits (2)
This is a writeup describing directory traversal vulnerabilities in Mongoose Web Server v2.8. It provides example URLs demonstrating the vulnerability but does not include executable exploit code.
This exploit demonstrates a remote source disclosure vulnerability in Mongoose Web Server <= 2.8.0. By appending a trailing slash to a file request, the server reveals the source code of the file instead of executing it.