← Database

CVE-2002-2427

MEDIUM CVSS: 5.0 Published: 2009-02-06 Modified: 2026-06-16

Description

The security handler in GoAhead WebServer before 2.1.1 allows remote attackers to bypass authentication and obtain access to protected web content via "an extra slash in a URL," a different vulnerability than CVE-2002-1603.

Affected Platforms

Goahead Goahead Webserver

Weakness Type

CWE-287

References