CVE-2006-2248: Northern Solutions Xeneo Web Server

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

Xeneo Web Server 2.2.22.0 allows remote attackers to obtain the source code of script files via crafted requests containing dot, space, and slash characters in the file extension.

Affected products

Published 2006-05-09. Last modified 2026-06-16.