CVE-2006-5752
EPSS 18.4%發布日:2007/6/27修改日:2026/4/28
描述
Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform "charset detection" when the content-type is not specified.
受影響套件(1)
- Debian/apache2from 0, < 2.2.4-2