CVE-2006-1391

The (a) Quick 'n Easy Web Server before 3.1.1 and (b) Baby ASP Web Server 2.7.2 allows remote attackers to obtain the source code of ASP files via (1) . (dot) and (2) space characters in the extension of a URL.

• http://secunia.com/advisories/19306Patch, Vendor Advisory
• http://secunia.com/advisories/19312Vendor Advisory
• http://secunia.com/secunia_research/2006-19/advisory/Patch, Vendor Advisory
• http://securityreason.com/securityalert/624
• http://www.osvdb.org/24099
• http://www.osvdb.org/24100Patch
• http://www.securityfocus.com/archive/1/428667/100/0/threaded
• http://www.securityfocus.com/bid/17222Patch
• http://www.vupen.com/english/advisories/2006/1085
• http://www.vupen.com/english/advisories/2006/1088
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25417
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25418
• http://secunia.com/advisories/19306Patch, Vendor Advisory
• http://secunia.com/advisories/19312Vendor Advisory
• http://secunia.com/secunia_research/2006-19/advisory/Patch, Vendor Advisory
• http://securityreason.com/securityalert/624
• http://www.osvdb.org/24099
• http://www.osvdb.org/24100Patch
• http://www.securityfocus.com/archive/1/428667/100/0/threaded
• http://www.securityfocus.com/bid/17222Patch
• http://www.vupen.com/english/advisories/2006/1085
• http://www.vupen.com/english/advisories/2006/1088
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25417
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25418

Published

Mar 25, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-1385Stack-based buffer overflow in the parseTaggedData function …
• CVE-2006-1386The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1…
• CVE-2006-1387TWiki 4.0, 4.0.1, and 20010901 through 20040904 allows remot…
• CVE-2006-1388Unspecified vulnerability in Microsoft Internet Explorer 6.0…
• CVE-2006-1389Unspecified vulnerability in swagentd in HP-UX B.11.00, B.11…
• CVE-2006-1390The configuration of NetHack 3.4.3-r1 and earlier, Falcon's …
• CVE-2006-1392Multiple cross-site scripting (XSS) vulnerabilities in index…
• CVE-2006-1393Multiple cross-site scripting (XSS) vulnerabilities in the m…
• CVE-2006-1394Multiple cross-site scripting (XSS) vulnerabilities in the M…
• CVE-2006-1395SQL injection vulnerability in mb.cgi in Cholod MySQL Based …
• CVE-2006-1396Multiple cross-site scripting (XSS) vulnerabilities in Cholo…
• CVE-2006-1397Multiple cross-site scripting (XSS) vulnerabilities in (a) p…