Test Methods ( Detailed Overview )

Here is a list of every test performed by Web Scan Service.

Appended File Extension Source Code Disclosure

Remediation Task

No task available

WASC Classification

Information Disclosure: Information Leakage

Affected Products

This issue may affect different types of products

Technical Description

It is possible to get the source code if the filename is appended with "+", "%20" and/or "%2e". This may allow a malicious user to gain sensitive information to plan further attacks.

Fix Recommendation

This may be a general problem of your web server or a web application. We recommend to update all applications and the web server version if possible.