Description
It is possible to cause Apache HTTP server to return client-supplied scripting code by submitting a malformed HTTP method which would actually carry the payload (i.e.: malicious JavaScript) and invalid length data. Consult web references for more information about this vulnerability.
Remediation
Upgrade to the latest version of Apache.
References
Related Vulnerabilities
WordPress Plugin WP Media Cleaner Multiple Cross-Site Scripting Vulnerabilities (2.2.6)
WordPress Plugin MobileView by ColorLabs & Company Cross-Site Scripting (1.0.7)
WordPress Plugin Chamber Dashboard Business Directory Cross-Site Scripting (3.2.8)
WordPress Plugin GeSHi Source Colorer Cross-Site Scripting (0.13)