CVE-2002-1603

GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP...

5.0 MediumPublic exploit

GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, , %2f (encoded /), %20 (encoded space), or %00 (encoded null) character, which returns the ASP source code unparsed.

Exploit likelihood

13.7%Up 1.1 points since Feb 4, 2022

What each source reports

NVD Score used5.0

Record: CVE-2002-1603
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated: 2026-11-02

CVE ListNo score

Record: CVE-2002-1603
Updated: 2026-11-02

EUVDEUVD-2002-1584No score

Record: EUVD-2002-1584
Updated: 2026-11-03

GitHub AdvisoriesGHSA-xc79-9vgp-q8cmNo score

GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP...

Record: GHSA-xc79-9vgp-q8cm
Updated: 2026-11-02

Affected products

goahead software webserver

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	GoAhead Web Server 2.1.x - '.ASP' File Source Code Disclosure	2002-12-17

History

History
Recorded	Changed	Sources
Nov 10, 2026	facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2002-1603 is a medium vulnerability (CVSS 5.0) in Goahead Software Webserver, published February 13, 2002. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 13.7%, the 96th percentile. No source names a fixed version.

References

Show 9 moreShow less