MondoSearch show the source of all files -------------------------------------------- Affected Program: MondoSearch 4.4 (possibly earlier versions too, but not tested) Vendor: http://www.mondosoft.com Vendor Status: not informed yet Discovery Date: 10 oct 2002 Problem ------- You can see the source of the files, who are in the same directory and subdirectories Example ------- http://www.foo/cgi-bin2/MsmMask.exe?mask=/ foo.asp ..to see the source of foo.asp in the root dir Solutions --------- * The program have to check if is real .cfg file
