Description
mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via an HTTP request containing an escape sequence for a terminal emulator.
Remediation
References
Related Vulnerabilities
WordPress Plugin Classified Listing Store & Membership Cross-Site Scripting (1.4.19)
WordPress Plugin Event Management Tickets Booking By Event Monster Cross-Site Scripting (1.0.7)
Apache HTTP Server Other Vulnerability (CVE-2002-1233)
WordPress Plugin Coming Soon Page & Maintenance Mode Cross-Site Scripting (1.8.1)
OpenSSL Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2026-22796)