Description
IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL.
Remediation
References
Related Vulnerabilities
WordPress Plugin MM Forms Community 'doajaxfileupload.php' Arbitrary File Upload (2.2.6)
WordPress Plugin Google Maps CP Cross-Site Scripting (1.0.3)
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-8625)
WordPress Plugin Slimstat Analytics Cross-Site Scripting (4.1.5.2)