Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...

🗓️ 11 Dec 2025 09:01:55Reported by MicrosoftType

Apache HTTP Server Server Side Includes appends a query string to #exec cmd.

Reporter	Title	Published	Views	Family All 246
IBM Security Bulletins	Security Bulletin: Vulnerabilities in httpd library (CVE-2025-58098, CVE-2025-65082, CVE-2025-66200) affect Power HMC.	31 Mar 202615:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server is affected by multiple vulnerabilities	15 Dec 202515:39	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in httpd affects IBM Netezza Appliance	24 Apr 202608:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM DevOps Code ClearCase [CVE-2025-66200, CVE-2025-59375, CVE-2025-65082, CVE-2025-59775, CVE-2025-58098]	4 Feb 202609:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server shipped with IBM OpenPages is vulnerable to multiple vulnerabilities	18 Mar 202614:42	–	ibm
FreeBSD	Apache httpd -- Multiple vulnerabilities	4 Dec 202500:00	–	freebsd
Tenable Nessus	Amazon Linux 2023 : httpd, httpd-core, httpd-devel (ALAS2023-2025-1318)	8 Jan 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : httpd, --advisory ALAS2-2025-3099 (ALAS-2025-3099)	5 Jan 202600:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0197: httpd:2.4 (ALINUX3-SA-2025:0197)	29 Dec 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : httpd:2.4 (ALSA-2025:23732)	22 Dec 202500:00	–	nessus