Escapade 0.2.1 Beta Scripting Engine - 'PAGE' Full Path Disclosure

EDB-ID:

23128

CVE:

N/A




Platform:

CGI

Date:

2003-09-09


source: https://www.securityfocus.com/bid/8574/info

Escapade is prone to a path disclosure vulnerability. It is possible to gain access to sensitive path information by issuing a request for an invalid resource, passed as a value for the PAGE parameter to the Escapade Scripting Engine. 

http://www.site.com/cgi-bin/esp?PAGE=!@#$%