CVE-2010-2263

Published: Jun 15, 2010Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI.

Affected (2)

Products: F5: Nginx

1 product

Nginx

Configuration A

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 Nginx	From 0.7.52 to 0.7.66
F5 Nginx	From 0.8.0 to 0.8.39

Running on/with	Platform Versions
Microsoft Windows	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (8)

http://spa-s3c.blogspot.com/2010/06/full-responsible-disclosurenginx-engine.html

Source: cve@mitre.org

ExploitRelease NotesThird Party Advisory

http://www.exploit-db.com/exploits/13818

Source: cve@mitre.org