Description
Xeneo Web Server 2.2.22.0 allows remote attackers to obtain the source code of script files via crafted requests containing dot, space, and slash characters in the file extension.
References
- ADV-2006-1682 vdb-entry
- http://secunia.com/secunia_research/2006-20/advisory/
- 19325 third-party-advisory
- xeneo-script-source-disclosure(26294) vdb-entry
- 17858 vdb-entry
- 25283 vdb-entry