Description

Cross-site scripting (XSS) vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page.

Remediation

References

CVE-2008-2168

Related Vulnerabilities

MySQL CVE-2023-22054 Vulnerability (CVE-2023-22054)

phpBB CVE-2008-6507 Vulnerability (CVE-2008-6507)

Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1000399)

WordPress Plugin Flog Server-Side Request Forgery (1.0beta3)

PHP Resource Management Errors Vulnerability (CVE-2006-1549)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2008-2168