CVE-2010-2263
60Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 72%
from disclosure to weapon0 days
Published on NVDJun 14
1st PoCJun 11
exploitation probability
72%top 1% of all CVEs
observed exploitation
nono source reports it
4 public exploit(s)
nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI.
Affected products
n/a · n/apublic PoCs found — 4✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/13822exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/13818cve_referencewww.exploit-db.com/exploits/13818unverifiedcve_referencewww.exploit-db.com/exploits/13822unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.