CVE-2006-2248

Description

Xeneo Web Server 2.2.22.0 allows remote attackers to obtain the source code of script files via crafted requests containing dot, space, and slash characters in the file extension.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/26294

http://www.vupen.com/english/advisories/2006/1682

http://www.securityfocus.com/bid/17858

http://www.osvdb.org/25283

http://secunia.com/secunia_research/2006-20/advisory/

http://secunia.com/advisories/19325

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS