cbcvebase.
CVE-2006-2309
published 2006-06-02

CVE-2006-2309: The HTTP service in EServ/3 3.25 allows remote attackers to obtain sensitive information via crafted HTTP requests containing dot, space, and slash characters…

PriorityP415medium4CVSS 2.0
AVNACLAuSCPINAN
EPSS
1.61%
72.9th percentile
The HTTP service in EServ/3 3.25 allows remote attackers to obtain sensitive information via crafted HTTP requests containing dot, space, and slash characters, which reveals the source code of script files.

Affected

2 ranges
VendorProductVersion rangeFixed in
etypeeserv——
etypeeserv——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.