CVE-2007-3365: Myserverproject Myserver

High severity, CVSS 7.5. EPSS: 6% chance of exploitation in the next 30 days.

MyServer 0.8.9 and earlier does not properly handle uppercase characters in filename extensions, which allows remote attackers to obtain sensitive information (script source code) via a modified extension, as demonstrated by post.mscgI.

Affected products

• Myserverproject Myserver: up to and including 0.8.9

Published 2007-06-22. Last modified 2026-06-16.