CVE-2009-3646 - InterVations NaviCOPA Web Server 3.01 allows remote attackers to obtain the source code for a web page via an HTTP request with the addition of ::$DATA after the HTML file name

Back Back to CVE browser

MEDIUM

InterVations NaviCOPA Web Server 3.01 allows remote attackers to obtain the source code for a web page via an HTTP request with the addition of ::$DATA after the HTML file name

Published Oct 9, 2009

5.0

MEDIUM

CVSS 2.0

EPSS 5.89%

Description

InterVations NaviCOPA Web Server 3.01 allows remote attackers to obtain the source code for a web page via an HTTP request with the addition of ::$DATA after the HTML file name.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (5)

http://secunia.com/advisories/33766
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/9694
exploitx_refsource_EXPLOIT-DB
http://www.osvdb.org/58386
vdb-entryx_refsource_OSVDBExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-3621
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/53278
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/33766		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/9694		exploitx_refsource_EXPLOIT-DB
http://www.osvdb.org/58386		vdb-entryx_refsource_OSVDBExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-3621		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/53278		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 9, 2009

Updated Aug 7, 2024

Reserved Oct 9, 2009

Link CVE-2009-3646

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-3646

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Oct 9, 2009

Updated Aug 7, 2024

Link EUVD-2009-3621

GitHub

No data