Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2007-6388
HistoryJan 08, 2008 - 6:46 p.m.

CVE-2007-6388

2008-01-0818:46:00
CWE-79
[email protected]
web.nvd.nist.gov
178
cve-2007-6388
cross-site scripting
xss
apache http server
security vulnerability
nvd

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.818 High

EPSS

Percentile

98.3%

JSON

Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

Related

openvas 71
ubuntucve 1
httpd 3
prion 1
seebug 1
debiancve 1
securityvulns 6
veracode 1
slackware 3
nessus 39
redhat 8
centos 4
oraclelinux 3
fedora 2
altlinux 3
suse 1
vmware 2
ubuntu 1
oracle 1
openvas
openvas
HP-UX Update for Apache HPSBUX02313
2009-05-05 00:00:00
HP-UX Update for Apache HPSBUX02313
2009-05-05 00:00:00
Slackware Advisory SSA:2008-210-02 httpd
2012-09-11 00:00:00
ubuntucve
ubuntucve
CVE-2007-6388
2008-01-08 00:00:00
httpd
httpd
Apache Httpd < 2.0.63 : mod_status XSS
2007-12-15 00:00:00
Apache Httpd < 2.2.8 : mod_status XSS
2007-12-15 00:00:00
Apache Httpd < 1.3.41 : mod_status XSS
2007-12-15 00:00:00
prion
prion
Cross site scripting
2008-01-08 18:46:00
seebug
seebug
Apache HTTP Server 2.2.6, 2.0.61和1.3.39 'mod_status'跨站脚本漏洞
2008-01-14 00:00:00
debiancve
debiancve
CVE-2007-6388
2008-01-08 18:46:00
securityvulns
securityvulns
SecurityReason - Apache &#40;mod_status&#41; Refresh Header - Open Redirector &#40;XSS&#41;
2008-01-16 00:00:00
HP OpenView Network Node Manager crossite scripting
2008-11-21 00:00:00
[security bulletin] HPSBMA02388 SSRT080059 rev.1 - HP OpenView Network Node Manager &#40;OV NNM&#41;, Remote Cross Site Scripting &#40;XSS&#41;
2008-11-21 00:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2020-04-10 00:19:35
slackware
slackware
[slackware-security] httpd
2008-07-29 05:31:49
[slackware-security] apache
2008-02-15 01:23:13
[slackware-security] httpd
2008-02-15 01:22:54
nessus
nessus
Slackware 12.0 / 12.1 / current : httpd (SSA:2008-210-02)
2008-07-29 00:00:00
Slackware 10.0 / 10.1 / 10.2 / 11.0 / 8.1 / 9.0 / 9.1 : apache (SSA:2008-045-02)
2008-02-18 00:00:00
RHEL 4 : httpd (RHSA-2008:0006)
2008-01-15 00:00:00
redhat
redhat
(RHSA-2008:0007) Moderate: httpd security update
2008-01-15 00:00:00
(RHSA-2008:0006) Moderate: httpd security update
2008-01-15 00:00:00
(RHSA-2008:0004) Moderate: apache security update
2008-01-15 00:00:00
centos
centos
apache security update
2008-01-16 02:42:35
httpd, mod_ssl security update
2008-01-15 13:48:01
httpd, mod_ssl security update
2008-01-15 12:48:29
oraclelinux
oraclelinux
Moderate: httpd security update
2008-01-15 00:00:00
Moderate: httpd security update
2008-01-15 00:00:00
Moderate: httpd security update
2008-01-15 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: httpd-2.2.8-1.fc8
2008-02-16 02:11:16
[SECURITY] Fedora 7 Update: httpd-2.2.8-1.fc7
2008-02-16 02:08:32
altlinux
altlinux
Security fix for the ALT Linux 9 package apache2 version 2.2.8-alt1
2008-02-29 00:00:00
Security fix for the ALT Linux 8 package apache2 version 2.2.8-alt1
2008-02-29 00:00:00
Security fix for the ALT Linux 10 package apache2 version 2.2.8-alt1
2008-02-29 00:00:00
suse
suse
cross site scripting in apache2,apache
2008-04-04 16:29:16
vmware
vmware
VMware Hosted products update libpng and Apache HTTP Server
2009-08-20 00:00:00
VMware Hosted products update libpng and Apache HTTP Server
2009-08-20 00:00:00
ubuntu
ubuntu
Apache vulnerabilities
2008-02-04 00:00:00
oracle
oracle
Oracle Critical Patch Update - July 2013
2013-07-16 00:00:00

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.818 High

EPSS

Percentile

98.3%

JSON
Related for CVE-2007-6388
openvas71ubuntucve1httpd3prion1seebug1debiancve1securityvulns6veracode1slackware3nessus39redhat8centos4oraclelinux3fedora2altlinux3suse1vmware2ubuntu1oracle1