CVE-2006-2248

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.53%

Published

May 9, 2006

Modified

Jun 16, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Xeneo Web Server 2.2.22.0 allows remote attackers to obtain the source code of script files via crafted requests containing dot, space, and slash characters in the file extension.

Affected Products (1)

northern_solutions · xeneo_web_servervulnerable

References (12)

http://secunia.com/advisories/19325

Vendor Advisory

http://secunia.com/secunia_research/2006-20/advisory/

Vendor Advisory

http://www.osvdb.org/25283

http://www.securityfocus.com/bid/17858

http://www.vupen.com/english/advisories/2006/1682

https://exchange.xforce.ibmcloud.com/vulnerabilities/26294

http://secunia.com/advisories/19325

Vendor Advisory

http://secunia.com/secunia_research/2006-20/advisory/

Vendor Advisory

http://www.osvdb.org/25283

http://www.securityfocus.com/bid/17858

http://www.vupen.com/english/advisories/2006/1682

https://exchange.xforce.ibmcloud.com/vulnerabilities/26294

KEV Catalog EPSS Scores Vendors All CVEs