PT-2004-3108 · Embedthis · Mbedthis Appweb

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2213

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mbedthis AppWeb versions prior to 1.1.3

Description The issue allows remote attackers to obtain the source code for scripts via specific manipulations of an HTTP request, such as appending a trailing dot (.) or a trailing space.

Recommendations For versions prior to 1.1.3, update to version 1.1.3 or later to resolve the issue.

Fix

Related Identifiers

CVE-2004-2213

Affected Products

Mbedthis Appweb

References · 6

• http://securityfocus.com/bid/10673 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2004-2213 · Security Note
• http://secunia.com/advisories/12011 · Vendor Advisory
• http://osvdb.org/7390 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16636 · Note
• http://mbedthis.com/products/appWeb/doc/product/newFeatures.html · Note