Re: Major Security Hole IIS NT
This WebDNA talk-list message is from 1998
It keeps the original formatting.
numero = 18598
interpreted = N
texte = Holy Crap...........quick PCS, release that unix port!!!At 11:13 AM 7/2/98, you wrote: >IIS reveals all special CGI Code > >Think no one can read your contextual searches, think again. > >Hit your webpage on an IIS server > >like http://www.yourdomain.com/special.tpl > >now try it like this > >http://www.yourdomain.com/special.tpl::$DATA > >All source code is revealed, even the special webdna data, > >this applies to all special CGI's running on IIS like ASP and Pearl. Try it. >Hit your favorite microsoft server and add the url ::$DATA and you will see >the special source code. > >Look here, this page is running Microsofts ASP and you can read it all. > >heheheh Pretty cool > >http://backoffice.microsoft.com/downtrial/default.asp::$DATA > >bummer is it also works on .tpl and the rest as well, I don't know about the >encrypted pages available with 3.0 but I would be interested in hearing from >others. > >Robert Minor >Cybermill Communications > Webmaster Mind Information Systems http://www.mindinfo.com
Associated Messages, from the most recent to the oldest:
Holy Crap...........quick PCS, release that unix port!!!At 11:13 AM 7/2/98, you wrote: >IIS reveals all special CGI Code > >Think no one can read your contextual searches, think again. > >Hit your webpage on an IIS server > >like http://www.yourdomain.com/special.tpl > >now try it like this > >http://www.yourdomain.com/special.tpl::$DATA > >All source code is revealed, even the special webdna data, > >this applies to all special CGI's running on IIS like ASP and Pearl. Try it. >Hit your favorite microsoft server and add the url ::$DATA and you will see >the special source code. > >Look here, this page is running Microsofts ASP and you can read it all. > >heheheh Pretty cool > >http://backoffice.microsoft.com/downtrial/default.asp::$DATA > >bummer is it also works on .tpl and the rest as well, I don't know about the >encrypted pages available with 3.0 but I would be interested in hearing from >others. > >Robert Minor >Cybermill Communications > Webmaster Mind Information Systems http://www.mindinfo.com
Raymond Hatch
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
Database Program (1997)
MacOS X Server problems (2001)
[WebDNA] ListFiles question (2012)
Using Plug-In while running 1.6.1 (1997)
t or f (1997)
OLD ORDERS (1998)
shipCost not working v2.1b4 (1997)
creating an index based on first letter of word in specificfield in database (2002)
Using [sendmail] for mass mailings (2001)
Can't find templaes (1997)
Price and Formula.db (2002)
Locking up with WebCatalog... (1997)
weird happenings (1997)
Emailer Timing out (1999)
where to put code (1998)
international time (1997)
Mac Webcat 3.0.3b1 memory leak redirect inside search (1998)
WebCat editing, SiteGuard & SiteEdit (1997)
form data submission gets truncated (1997)
Field name-subcategory (1997)