Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2007-6388

Опубликовано: 08 янв. 2008
Источник: ubuntu
Приоритет: low
EPSS Высокий
CVSS2: 4.3

Описание

Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

РелизСтатусПримечание
dapper

ignored

end of life
devel

DNE

edgy

ignored

end of life, was needed
feisty

ignored

end of life, was needed
gutsy

DNE

hardy

DNE

intrepid

DNE

jaunty

DNE

karmic

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
dapper

released

2.0.55-4ubuntu2.3
devel

not-affected

2.2.8-1
edgy

released

2.0.55-4ubuntu4.2
feisty

released

2.2.3-3.2ubuntu2.1
gutsy

released

2.2.4-3ubuntu0.1
hardy

not-affected

2.2.8-1
intrepid

not-affected

2.2.8-1
jaunty

not-affected

2.2.8-1
karmic

not-affected

2.2.8-1
upstream

needs-triage

Показывать по

EPSS

Процентиль: 99%
0.8352
Высокий

4.3 Medium

CVSS2

Связанные уязвимости

redhat
больше 17 лет назад

Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

nvd
больше 17 лет назад

Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

debian
больше 17 лет назад

Cross-site scripting (XSS) vulnerability in mod_status in the Apache H ...

github
около 3 лет назад

Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

oracle-oval
больше 17 лет назад

ELSA-2008-0008: Moderate: httpd security update (MODERATE)

EPSS

Процентиль: 99%
0.8352
Высокий

4.3 Medium

CVSS2