Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2007-6388
HistoryJan 08, 2008 - 6:46 p.m.

CVE-2007-6388

2008-01-0818:46:00
CWE-79
mitre
web.nvd.nist.gov
188
cve-2007-6388
cross-site scripting
xss
apache http server
security vulnerability
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

8

Confidence

High

EPSS

0.764

Percentile

98.2%

JSON

Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

Nvd
Node
apachehttp_serverRange1.3.2–1.3.39
OR
apachehttp_serverRange2.0.35–2.0.61
OR
apachehttp_serverRange2.2.0–2.2.6
VendorProductVersionCPE
apachehttp_server*cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*

References

Related

seebug 1
debiancve 1
prion 1
nvd 1
openvas 71
ubuntucve 1
httpd 3
cvelist 1
veracode 1
securityvulns 6
slackware 3
nessus 39
redhat 8
centos 4
oraclelinux 3
fedora 2
altlinux 3
suse 1
vmware 2
ubuntu 1
osv 1
oracle 1
seebug
seebug
Apache HTTP Server 2.2.6, 2.0.61和1.3.39 'mod_status'跨站脚本漏洞
2008-01-14 00:00:00
debiancve
debiancve
CVE-2007-6388
2008-01-08 18:46:00
prion
prion
Cross site scripting
2008-01-08 18:46:00
nvd
nvd
CVE-2007-6388
2008-01-08 18:46:00
openvas
openvas
HP-UX Update for Apache HPSBUX02313
2009-05-05 00:00:00
HP-UX Update for Apache HPSBUX02313
2009-05-05 00:00:00
Slackware Advisory SSA:2008-210-02 httpd
2012-09-11 00:00:00
ubuntucve
ubuntucve
CVE-2007-6388
2008-01-08 00:00:00
httpd
httpd
Apache Httpd < 2.0.63 : mod_status XSS
2007-12-15 00:00:00
Apache Httpd < 2.2.8 : mod_status XSS
2007-12-15 00:00:00
Apache Httpd < 1.3.41 : mod_status XSS
2007-12-15 00:00:00
cvelist
cvelist
CVE-2007-6388
2008-01-08 18:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2020-04-10 00:19:35
securityvulns
securityvulns
SecurityReason - Apache &#40;mod_status&#41; Refresh Header - Open Redirector &#40;XSS&#41;
2008-01-16 00:00:00
HP OpenView Network Node Manager crossite scripting
2008-11-21 00:00:00
[security bulletin] HPSBMA02388 SSRT080059 rev.1 - HP OpenView Network Node Manager &#40;OV NNM&#41;, Remote Cross Site Scripting &#40;XSS&#41;
2008-11-21 00:00:00
slackware
slackware
[slackware-security] httpd
2008-07-29 05:31:49
[slackware-security] apache
2008-02-15 01:23:13
[slackware-security] httpd
2008-02-15 01:22:54
nessus
nessus
Slackware 12.0 / 12.1 / current : httpd (SSA:2008-210-02)
2008-07-29 00:00:00
Slackware 10.0 / 10.1 / 10.2 / 11.0 / 8.1 / 9.0 / 9.1 : apache (SSA:2008-045-02)
2008-02-18 00:00:00
RHEL 2.1 : apache (RHSA-2008:0004)
2008-01-15 00:00:00
redhat
redhat
(RHSA-2008:0007) Moderate: httpd security update
2008-01-15 00:00:00
(RHSA-2008:0006) Moderate: httpd security update
2008-01-15 00:00:00
(RHSA-2008:0004) Moderate: apache security update
2008-01-15 00:00:00
centos
centos
apache security update
2008-01-16 02:42:35
httpd, mod_ssl security update
2008-01-15 13:48:01
httpd, mod_ssl security update
2008-01-15 12:48:29
oraclelinux
oraclelinux
Moderate: httpd security update
2008-01-15 00:00:00
Moderate: httpd security update
2008-01-15 00:00:00
Moderate: httpd security update
2008-01-15 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: httpd-2.2.8-1.fc8
2008-02-16 02:11:16
[SECURITY] Fedora 7 Update: httpd-2.2.8-1.fc7
2008-02-16 02:08:32
altlinux
altlinux
Security fix for the ALT Linux 9 package apache2 version 2.2.8-alt1
2008-02-29 00:00:00
Security fix for the ALT Linux 8 package apache2 version 2.2.8-alt1
2008-02-29 00:00:00
Security fix for the ALT Linux 10 package apache2 version 2.2.8-alt1
2008-02-29 00:00:00
suse
suse
cross site scripting in apache2,apache
2008-04-04 16:29:16
vmware
vmware
VMware Hosted products update libpng and Apache HTTP Server
2009-08-20 00:00:00
VMware Hosted products update libpng and Apache HTTP Server
2009-08-20 00:00:00
ubuntu
ubuntu
Apache vulnerabilities
2008-02-04 00:00:00
osv
osv
apache2-2.4.49-1.1 on GA media
2024-06-15 00:00:00
oracle
oracle
Oracle Critical Patch Update - July 2013
2013-07-16 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

8

Confidence

High

EPSS

0.764

Percentile

98.2%

JSON
Related for CVE-2007-6388
seebug1debiancve1prion1nvd1openvas71ubuntucve1httpd3cvelist1veracode1securityvulns6slackware3nessus39redhat8centos4oraclelinux3fedora2altlinux3suse1vmware2ubuntu1osv1oracle1