CVE-2006-2309

CVE-2006-2309 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:N/A:N

The HTTP service in EServ/3 3.25 allows remote attackers to obtain sensitive information via crafted HTTP requests containing dot, space, and slash characters, which reveals the source code of script files.

Learn more about our Web Application Penetration Testing UK.