Vulnerability in Pico Server

CVE-2005-1366

Pico Server (pServ) 3.2 and earlier allows remote attackers to obtain the source code for CGI scripts via "dirname/../cgi-bin" in a URL.

EPSS: 0.069 (93.4th percentile) — read the EPSS interpretation.

Affected products

Pico_server — versions 3.0, 3.0_beta_3, 3.1
N/a — versions n/a

References

cve@mitre.org (Exploit, x_refsource_MISC, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (mailing-list, x_refsource_FULLDISC)