Major Security Hole IIS NT
This WebDNA talk-list message is from 1998
It keeps the original formatting.
numero = 18612
interpreted = N
texte = IIS reveals all special CGI CodeThink no one can read your contextual searches, think again.Hit your webpage on an IIS serverlike http://www.yourdomain.com/special.tplnow try it like thishttp://www.yourdomain.com/special.tpl::$DATAAll source code is revealed, even the special webdna data,this applies to all special CGI's running on IIS like ASP and Pearl. Try it.Hit your favorite microsoft server and add the url ::$DATA and you will seethe special source code.Look here, this page is running Microsofts ASP and you can read it all.heheheh Pretty coolhttp://backoffice.microsoft.com/downtrial/default.asp::$DATAbummer is it also works on .tpl and the rest as well, I don't know about theencrypted pages available with 3.0 but I would be interested in hearing fromothers.Robert MinorCybermill Communications
Associated Messages, from the most recent to the oldest:
IIS reveals all special CGI CodeThink no one can read your contextual searches, think again.Hit your webpage on an IIS serverlike http://www.yourdomain.com/special.tplnow try it like thishttp://www.yourdomain.com/special.tpl::$DATAAll source code is revealed, even the special webdna data,this applies to all special CGI's running on IIS like ASP and Pearl. Try it.Hit your favorite microsoft server and add the url ::$DATA and you will seethe special source code.Look here, this page is running Microsofts ASP and you can read it all.heheheh Pretty coolhttp://backoffice.microsoft.com/downtrial/default.asp::$DATAbummer is it also works on .tpl and the rest as well, I don't know about theencrypted pages available with 3.0 but I would be interested in hearing fromothers.Robert MinorCybermill Communications
Bob Minor
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
WebCat website for developers and hosters (2001)
WebCat for News Gathering (1999)
Frames and WebCat (1997)
Robots fill event log (1997)
suffix mapping for NT? (1997)
WebCat2b15MacPlugIn - [authenticate] not [protect] (1997)
emailer setup (1997)
raw=T is broken in [include] (1997)
WebCatalog for Postcards ? (1997)
[date] tag not working on mac 4.0.1 (2000)
taxTotal, too (1997)
Emailer again & again (1997)
show all problem (1997)
HTTP "host" header (2003)
Again: tcpconnect problem with authorize.net (2003)
quantity minimum problem (1997)
E-Mailer (WebCatb15acgiMac) (1997)
Netscape Communicator 4 chops off URLs (was No Data) (1997)
Multiple prices (1997)
New command suggestion (was Modifying databases manually) (1997)