CVE-2006-2248

Published: May 9, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Xeneo Web Server 2.2.22.0 allows remote attackers to obtain the source code of script files via crafted requests containing dot, space, and slash characters in the file extension.

Affected (1)

Products: Northern Solutions: Xeneo Web Server

Northern Solutions

1 product

Xeneo Web Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Northern Solutions Xeneo Web Server	Version 2.2.22.0

References (12)

http://secunia.com/advisories/19325

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/secunia_research/2006-20/advisory/

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/25283

Source: cve@mitre.org

http://www.securityfocus.com/bid/17858

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1682

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26294

Source: cve@mitre.org

http://secunia.com/advisories/19325