VULNERABILITY INTELLIGENCE

CVE-2006-2309

CVSS score4 NONE
EPSS probability1.61%
CISA KEVNot currently listed
Published2006-06-02
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:P/I:N/A:N

Description

The HTTP service in EServ/3 3.25 allows remote attackers to obtain sensitive information via crafted HTTP requests containing dot, space, and slash characters, which reveals the source code of script files.

Weakness classification

  • nvd@nist.gov: NVD-CWE-Other

Primary references