CVE-2009-0796

Currently unrated

Key Information:

Vendor
Apache
Status
Mod Perl
Vendor
CVE Published:
7 April 2009

Summary

Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in mod_perl1 and mod_perl2 for the Apache HTTP Server, when /perl-status is accessible, allows remote attackers to inject arbitrary web script or HTML via the URI.

References

http://www.securitytracker.com/id?1021988
vdb-entryx_refsource_SECTRACK
http://svn.apache.org/viewvc?view=rev&revision=761081
x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=MDVSA-20...
vendor-advisoryx_refsource_MANDRIVA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.