Lucene search
K

Apache mod_perl 'Apache::Status' and 'Apache2::Status' Cross-Site Scripting Vulnerability

🗓️ 01 Apr 2009 00:00:00Reported by Richard H. BrainType 
exploitdb
 exploitdb
🔗 www.exploit-db.com👁 32 Views

Apache mod_perl 'Apache::Status' and 'Apache2::Status' XSS Vulnerabilit

Related
Code
ReporterTitlePublishedViews
Family
Circl
CVE-2009-0795
9 Nov 200900:00
circl
CVE
CVE-2009-0795
8 Apr 200901:00
cve
Cvelist
CVE-2009-0795
8 Apr 200901:00
cvelist
NVD
CVE-2009-0795
8 Apr 200901:30
nvd
Tenable Nessus
Solaris 10 (sparc) : 122911-32
12 Mar 201800:00
nessus
Tenable Nessus
Solaris 10 (sparc) : 122911-33
12 Mar 201800:00
nessus
Tenable Nessus
Solaris 10 (sparc) : 122911-34
12 Mar 201800:00
nessus
Tenable Nessus
Solaris 10 (sparc) : 122911-35
12 Mar 201800:00
nessus
Tenable Nessus
Solaris 10 (sparc) : 122911-36
12 Mar 201800:00
nessus
Tenable Nessus
Solaris 10 (sparc) : 122911-37
12 Mar 201800:00
nessus
Rows per page
source: http://www.securityfocus.com/bid/34383/info

The Apache 'mod_perl' module is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/perl-status/APR::SockAddr::port/%22%3E%3Cscript%3Ealert(1)%3C/script%3E 

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

01 Apr 2009 00:00Current
6.2Medium risk
Vulners AI Score6.2
32