VULNERABILITY INTELLIGENCE

CVE-2009-3646

CVSS score5 MEDIUM

EPSS probability5.89%

CISA KEVNot currently listed

Published2009-10-09

Last modified2026-06-16

Description

InterVations NaviCOPA Web Server 3.01 allows remote attackers to obtain the source code for a web page via an HTTP request with the addition of ::$DATA after the HTML file name.