Логотип exploitDog
bind:CVE-2007-4465
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2007-4465

Количество 6

Количество 6

ubuntu логотип

CVE-2007-4465

почти 18 лет назад

Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.

CVSS3: 6.1
EPSS: Низкий
redhat логотип

CVE-2007-4465

почти 18 лет назад

Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.

EPSS: Низкий
nvd логотип

CVE-2007-4465

почти 18 лет назад

Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2007-4465

почти 18 лет назад

Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apa ...

CVSS3: 6.1
EPSS: Низкий
github логотип

GHSA-7286-985c-74qv

около 3 лет назад

Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.

CVSS3: 6.1
EPSS: Низкий
oracle-oval логотип

ELSA-2008-0008

больше 17 лет назад

ELSA-2008-0008: Moderate: httpd security update (MODERATE)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2007-4465

Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.

CVSS3: 6.1
5%
Низкий
почти 18 лет назад
redhat логотип
CVE-2007-4465

Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.

5%
Низкий
почти 18 лет назад
nvd логотип
CVE-2007-4465

Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.

CVSS3: 6.1
5%
Низкий
почти 18 лет назад
debian логотип
CVE-2007-4465

Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apa ...

CVSS3: 6.1
5%
Низкий
почти 18 лет назад
github логотип
GHSA-7286-985c-74qv

Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.

CVSS3: 6.1
5%
Низкий
около 3 лет назад
oracle-oval логотип
ELSA-2008-0008

ELSA-2008-0008: Moderate: httpd security update (MODERATE)

больше 17 лет назад

Уязвимостей на страницу