CVE-2009-4529: Intervations Navicopa Web Server

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

InterVations NaviCOPA Web Server 3.0.1.2 and earlier allows remote attackers to obtain the source code for a web page via a trailing encoded space character in a URI, as demonstrated by /index.html%20 and /index.php%20 URIs.

Affected products

• Intervations Navicopa Web Server: up to and including 3.0.1.2; version 2.01 only; version 3.01 only

Published 2009-12-31. Last modified 2026-06-16.