← Database

CVE-2006-2309

MEDIUM CVSS: 4.0 Published: 2006-06-02 Modified: 2026-06-16

Description

The HTTP service in EServ/3 3.25 allows remote attackers to obtain sensitive information via crafted HTTP requests containing dot, space, and slash characters, which reveals the source code of script files.

Affected Platforms

Etype Eserv

Weakness Type

NVD-CWE-Other

References