nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content o…

published 2010-06-14 16 y ago modified 2026-06-16 4 mo ago also EUVD-2010-2275

cvss: 5.0; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 71.9%; EPSS 71.9% chance of exploitation in 30 days, percentile 99.4%
public exploits: 3; Metasploit, Exploit-DB

nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI.

Patch / fix

fixed in 1

f5 nginx 0.7.66

Timeline

2010-06-11 First public exploit (EDB-13822)
2010-06-14 Published

Exploit prediction

71.93% chance of exploitation in the next 30 days, higher than 99.4% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

Metasploit auxiliary/scanner/http/nginx_source_disclosure Nginx Source Code Disclosure/Download metasploit auxiliary, normal rank
EDB-13822 Nginx 0.7.65/0.8.39 (dev) - Source Disclosure / Download remote, 2010-06-11
EDB-13818 Nginx 0.8.36 - Source Disclosure / Denial of Service remote, 2010-06-11
spa-s3c.blogspot.com http://spa-s3c.blogspot.com/2010/06/full-responsible-disclosurenginx-engine.html referenced PoC, tagged "exploit" by a source, unverified
securityfocus.com http://www.securityfocus.com/bid/40760 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
NVD	2.0	5.0	AV:N/AC:L/Au:N/C:P/I:N/A:N

Classification

Weakness

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Technology feeds

nginx rss critical rss

References

exploit-db.com /exploits/13818
exploit, third-party-advisory, vdb-entry
exploit-db.com /exploits/13822
exploit, third-party-advisory, vdb-entry
spa-s3c.blogspot.com /2010/06/full-responsible-disclosurenginx-engine.html
exploit, release-notes, third-party-advisory
securityfocus.com /bid/40760
vdb-entry, exploit, third-party-advisory

Sources

CVE List CVE-2010-2263
NVD CVE-2010-2263

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary