CVE-2010-2263

Description

nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-2275

http://www.securityfocus.com/bid/40760

http://www.exploit-db.com/exploits/13822

http://www.exploit-db.com/exploits/13818

http://spa-s3c.blogspot.com/2010/06/full-responsible-disclosurenginx-engine.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS