Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2007-6388

Опубликовано: 08 янв. 2008
Источник: ubuntu
Приоритет: low
EPSS Средний
CVSS2: 4.3

Описание

Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

РелизСтатусПримечание
dapper

ignored

end of life
devel

DNE

edgy

ignored

end of life, was needed
feisty

ignored

end of life, was needed
gutsy

DNE

hardy

DNE

intrepid

DNE

jaunty

DNE

karmic

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
dapper

released

2.0.55-4ubuntu2.3
devel

not-affected

2.2.8-1
edgy

released

2.0.55-4ubuntu4.2
feisty

released

2.2.3-3.2ubuntu2.1
gutsy

released

2.2.4-3ubuntu0.1
hardy

not-affected

2.2.8-1
intrepid

not-affected

2.2.8-1
jaunty

not-affected

2.2.8-1
karmic

not-affected

2.2.8-1
upstream

needs-triage

Показывать по

EPSS

Процентиль: 98%
0.61225
Средний

4.3 Medium

CVSS2

Связанные уязвимости

redhat
почти 18 лет назад

Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

nvd
почти 18 лет назад

Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

debian
почти 18 лет назад

Cross-site scripting (XSS) vulnerability in mod_status in the Apache H ...

github
больше 3 лет назад

Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

oracle-oval
почти 18 лет назад

ELSA-2008-0008: Moderate: httpd security update (MODERATE)

EPSS

Процентиль: 98%
0.61225
Средний

4.3 Medium

CVSS2