Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:23205
HistoryApr 10, 2020 - 12:19 a.m.

Cross-Site Scripting (XSS)

2020-04-1000:19:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16

0.015 Low

EPSS

Percentile

86.9%

JSON

httpd is vulnerable to cross-site scripting. A flaw was found in the mod_proxy_ftp module. On sites where mod_proxy_ftp was enabled and a forward proxy was configured, a cross-site scripting attack was possible against Web browsers which do not correctly derive the response character set following the rules in RFC 2616.

References

Related

httpd 2
ubuntucve 1
nvd 1
cve 1
debiancve 1
cvelist 1
prion 1
seebug 1
securityvulns 2
redhat 6
nessus 27
openvas 40
oraclelinux 2
centos 4
fedora 2
altlinux 3
gentoo 1
slackware 1
suse 1
vmware 2
ubuntu 1
httpd
httpd
Apache Httpd < 2.2.8 : mod_proxy_ftp UTF-7 XSS
2007-12-15 00:00:00
Apache Httpd < 2.0.63 : mod_proxy_ftp UTF-7 XSS
2007-12-15 00:00:00
ubuntucve
ubuntucve
CVE-2008-0005
2008-01-11 00:00:00
nvd
nvd
CVE-2008-0005
2008-01-12 00:46:00
cve
cve
CVE-2008-0005
2008-01-12 00:46:00
debiancve
debiancve
CVE-2008-0005
2008-01-12 00:46:00
cvelist
cvelist
CVE-2008-0005
2008-01-12 00:00:00
prion
prion
Cross site scripting
2008-01-12 00:46:00
seebug
seebug
Apache 'mod_proxy_ftp'未定义字符集UTF-7跨站脚本漏洞
2008-01-14 00:00:00
securityvulns
securityvulns
SecurityReason - Apache &#40;mod_proxy_ftp&#41; Undefined Charset UTF-7 XSS Vulnerability
2008-01-12 00:00:00
Apache multiple security vulnerabilities
2008-01-24 00:00:00
redhat
redhat
(RHSA-2008:0007) Moderate: httpd security update
2008-01-15 00:00:00
(RHSA-2008:0004) Moderate: apache security update
2008-01-15 00:00:00
(RHSA-2008:0006) Moderate: httpd security update
2008-01-15 00:00:00
nessus
nessus
RHEL 4 : httpd (RHSA-2008:0006)
2008-01-15 00:00:00
Apache < 2.0.63 Multiple XSS Vulnerabilities
2008-03-07 00:00:00
Oracle Linux 4 : httpd (ELSA-2008-0006)
2013-07-12 00:00:00
openvas
openvas
SLES9: Security update for Apache
2009-10-10 00:00:00
CentOS Update for httpd CESA-2008:0006 centos4 i386
2009-02-27 00:00:00
SLES9: Security update for Apache
2009-10-10 00:00:00
oraclelinux
oraclelinux
Moderate: httpd security update
2008-01-15 00:00:00
Moderate: httpd security update
2008-01-15 00:00:00
centos
centos
apache security update
2008-01-16 02:42:35
httpd, mod_ssl security update
2008-01-15 13:48:01
httpd, mod_ssl security update
2008-01-15 12:48:29
fedora
fedora
[SECURITY] Fedora 8 Update: httpd-2.2.8-1.fc8
2008-02-16 02:11:16
[SECURITY] Fedora 7 Update: httpd-2.2.8-1.fc7
2008-02-16 02:08:32
altlinux
altlinux
Security fix for the ALT Linux 9 package apache2 version 2.2.8-alt1
2008-02-29 00:00:00
Security fix for the ALT Linux 8 package apache2 version 2.2.8-alt1
2008-02-29 00:00:00
Security fix for the ALT Linux 10 package apache2 version 2.2.8-alt1
2008-02-29 00:00:00
gentoo
gentoo
Apache: Multiple vulnerabilities
2008-03-11 00:00:00
slackware
slackware
[slackware-security] httpd
2008-02-15 01:22:54
suse
suse
cross site scripting in apache2,apache
2008-04-04 16:29:16
vmware
vmware
VMware Hosted products update libpng and Apache HTTP Server
2009-08-20 00:00:00
VMware Hosted products update libpng and Apache HTTP Server
2009-08-20 00:00:00
ubuntu
ubuntu
Apache vulnerabilities
2008-02-04 00:00:00

0.015 Low

EPSS

Percentile

86.9%

JSON
Related for VERACODE:23205
httpd2ubuntucve1nvd1cve1debiancve1cvelist1prion1seebug1securityvulns2redhat6nessus27openvas40oraclelinux2centos4fedora2altlinux3gentoo1slackware1suse1vmware2ubuntu1