Description

nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI.

Remediation

References

CVE-2010-2263

Related Vulnerabilities

WordPress Plugin Hero Maps Premium Cross-Site Scripting (2.2.1)

MySQL CVE-2014-6520 Vulnerability (CVE-2014-6520)

Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-8089)

WordPress Plugin Codestyling Localization 'name' Parameter Cross-Site Scripting (1.99.19)

WordPress Plugin Mailtree Log Mail Cross-Site Scripting (1.0.0)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2010-2263