CVE-2009-4489

CVE-2009-4489 (Cherokee) : Cherokee 0.99.32 and earlier fails to sanitize non‑printable characters in log files, allowing an HTTP request with escape sequences to modify a window title or potentially execute commands/overwrite files. The issue is a log‑escape vulnerability affecting Cherokee and ...