{"id":"CVE-2010-2263","aliases":["EUVD-2010-2275","GHSA-2rq5-xfv5-vq54"],"status":"published","title":"nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers...","description":"nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.71926,"percentile":0.99431,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-200"],"published":"2010-06-14T18:00:00Z","modified":"2026-06-16T23:20:25Z","exploits":[{"source":"exploitdb","id":"EDB-13818","title":"Nginx 0.8.36 - Source Disclosure / Denial of Service","type":"remote","platform":"windows","date":"2010-06-11","verified":true,"url":"https://www.exploit-db.com/exploits/13818"},{"source":"exploitdb","id":"EDB-13822","title":"Nginx 0.7.65/0.8.39 (dev) - Source Disclosure / Download","type":"remote","platform":"windows","date":"2010-06-11","verified":true,"url":"https://www.exploit-db.com/exploits/13822"},{"source":"metasploit","id":"auxiliary/scanner/http/nginx_source_disclosure","title":"Nginx Source Code Disclosure/Download","type":"auxiliary","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/scanner/http/nginx_source_disclosure"}],"products":[{"vendor":"f5","product":"nginx"}],"references":[{"url":"http://www.exploit-db.com/exploits/13818","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://spa-s3c.blogspot.com/2010/06/full-responsible-disclosurenginx-engine.html","tags":["x_refsource_MISC","x_transferred","Exploit","Release Notes","Third Party Advisory"]},{"url":"http://www.exploit-db.com/exploits/13822","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/40760","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2263"},{"url":"https://github.com/advisories/GHSA-2rq5-xfv5-vq54"}],"sources":{"cve":[{"id":"CVE-2010-2263","description":"nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI.","status":"published","published":"2010-06-14T18:00:00Z","modified":"2024-08-07T02:25:07.565Z","updated_at":"2026-11-02T14:33:27.354104Z"}],"euvd":[{"id":"EUVD-2010-2275","description":"nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI.","status":"published","published":"2010-06-14T18:00:00Z","modified":"2024-08-07T02:25:07Z","updated_at":"2026-11-03T01:39:38.386309Z"}],"ghsa":[{"id":"GHSA-2rq5-xfv5-vq54","title":"nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers...","description":"nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI.","status":"published","published":"2022-05-13T01:05:17Z","modified":"2023-02-01T05:02:48Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:49:58.498747Z"}],"nvd":[{"id":"CVE-2010-2263","description":"nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI.","status":"published","published":"2010-06-15T14:04:24.313Z","modified":"2026-06-16T23:20:25.03Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:01:47.724369Z"}]}}