Unrated severityNVD Advisory· Published Jun 15, 2010· Updated Jun 16, 2026

CVE-2010-2263

Description

nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nginx/Nginxinferred2 versions
>=0.7,<0.7.66 || >=0.8,<0.8.40+ 1 more
- (no CPE)range: >=0.7,<0.7.66 || >=0.8,<0.8.40
- (no CPE)range: <0.7.66, <0.8.40

Patches

Vulnerability mechanics

References

spa-s3c.blogspot.com/2010/06/full-responsible-disclosurenginx-engine.htmlnvdExploitRelease NotesThird Party Advisory
www.exploit-db.com/exploits/13818nvdExploitThird Party AdvisoryVDB Entry
www.exploit-db.com/exploits/13822nvdExploitThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/40760nvdExploitThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.059
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000