VULNERABILITY INTELLIGENCE

CVE-2006-2248

CVSS score5 MEDIUM
EPSS probability1.53%
CISA KEVNot currently listed
Published2006-05-09
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Xeneo Web Server 2.2.22.0 allows remote attackers to obtain the source code of script files via crafted requests containing dot, space, and slash characters in the file extension.

Primary references