CVE-2006-2248

CVE-2006-2248

EPSS 1.5%

Xeneo Web Server 2.2.22.0 allows remote attackers to obtain the source code of script files via crafted requests containing dot, space, and slash characters in the file extension.

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://secunia.com/advisories/19325 http://secunia.com/secunia_research/2006-20/advisory/https://exchange.xforce.ibmcloud.com/vulnerabilities/26294 http://www.osvdb.org/25283 http://www.securityfocus.com/bid/17858 http://www.vupen.com/english/advisories/2006/1682