Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-0005)

Description

mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduct cross-site scripting (XSS) attacks using UTF-7 encoding.

Remediation

References

CVE-2008-0005

Related Vulnerabilities

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43723)

CubeCart Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3724)

WordPress Plugin Filedownload Multiple Vulnerabilities (1.4)

WordPress Plugin Testimonial Multiple Vulnerabilities (2.2)

Joomla! Core 3.x.x Multiple Vulnerabilities (3.0.0 - 3.10.6)

Severity

Medium

Classification

CVE-2008-0005 CWE-707