CVE-2006-2248

Xeneo Web Server 2.2.22.0 allows remote attackers to obtain the source code of script files via crafted requests containing dot, space, and slash characters in the file extension.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2006-05-09

Last modified

2024-08-07

Affected products

• Xeneo Web Server (Northern Solutions)

References

• http://secunia.com/advisories/19325
• http://secunia.com/secunia_research/2006-20/advisory/
• http://www.osvdb.org/25283
• http://www.securityfocus.com/bid/17858
• http://www.vupen.com/english/advisories/2006/1682
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26294