onyx

onyx --cves cve-2010-2263

CVE-2010-2263

MEDPOCnginx
score
<0.1
cvss
5.0
epss
71.9%
published
2010-06-15
kev added
—
first seen

nginx 0.8 before 0.8.40 and 0.7 before 0.7.66 on Windows contain a path traversal caused by appending ::$DATA to the URI, letting remote attackers access source code or unparsed content of arbitrary files under the web document root, exploit requires remote access to the web server.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2010-06-15 — PublishedP2026-10-21 — Tracked by OnyxT2026-10-21 — Public PoC: http://www.exploit-db.com/exploits/13818Xscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 71.9%2026-09-23: epss 71.9%2026-09-24: epss 71.9%2026-09-25: epss 71.9%2026-09-26: epss 71.9%2026-09-27: epss 71.9%2026-09-28: epss 71.9%2026-09-29: epss 71.9%2026-09-30: epss 71.9%2026-10-01: epss 71.9%2026-10-02: epss 71.9%2026-10-03: epss 71.9%2026-10-04: epss 71.9%2026-10-05: epss 71.9%2026-10-06: epss 71.9%2026-10-07: epss 71.9%2026-10-08: epss 71.9%2026-10-09: epss 71.9%2026-10-10: epss 71.9%2026-10-11: epss 71.9%2026-10-12: epss 71.9%2026-10-13: epss 71.9%2026-10-14: epss 71.9%2026-10-15: epss 71.9%2026-10-16: epss 71.9%2026-10-18: epss 71.9%2026-10-19: epss 71.9%2026-10-20: epss 71.9%2026-10-21: epss 71.9%71.9%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx
  3. Public PoC http://www.exploit-db.com/exploits/13818

Exploit availability

Weaknesses

CWE-200

References 4