paulino d4054187e4 Adds http-axis2-dir-traversal: ...

http-axis2-dir-traversal exploits a directory traversal vulnerability in Apache Axis2 version 1.4.1 by sending a specially crafted request to the parameter <code>xsd</code> (OSVDB-59001). By default it will try to retrieve the configuration file of the Axis2 service <code>'/conf/axis2.xml'</code> using the path <code>'/axis2/services/'</code> to return the username and password of the admin account.

2011-07-24 21:10:04 +00:00

19 KiB

Raw Blame History

View Raw