SGDynamo sgdynamo.exe HTNAME Parameter Path Disclosure

medium Nessus Plugin ID 11954

Language:

Synopsis

The remote web server has a CGI script that is affected by an information disclosure vulnerability.

Description

The CGI 'sgdynamo.exe' can be tricked into giving the physical path to the remote web root.

This information may be useful to an attacker who can use it to launch more effective attacks against the remote server.

Solution

Unknown at this time.

Plugin Details

Severity: Medium

ID: 11954

File Name: sgdynamo_path.nasl

Version: 1.21

Type: remote

Family: CGI abuses

Published: 12/18/2003

Updated: 1/19/2021

Supported Sensors: Nessus

Vulnerability Information

Excluded KB Items: Settings/disable_cgi_scanning

Detections

Analytics