CVEvulnerability
CVE-2006-2248
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-05-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
Xeneo Web Server 2.2.22.0 allows remote attackers to obtain the source code of script files via crafted requests containing dot, space, and slash characters in the file extension.
Affected configurations
• northern solutions xeneo web server 2.2.22.0
References
- http://secunia.com/advisories/19325 Vendor Advisory
- http://secunia.com/secunia_research/2006-20/advisory/ Vendor Advisory
- http://www.osvdb.org/25283 www.osvdb.org
- http://www.securityfocus.com/bid/17858 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/1682 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26294 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/19325 Vendor Advisory
- http://secunia.com/secunia_research/2006-20/advisory/ Vendor Advisory
- http://www.osvdb.org/25283 www.osvdb.org
- http://www.securityfocus.com/bid/17858 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/1682 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26294 exchange.xforce.ibmcloud.com