Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2006-5752

Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform "charset detection" when the content-type is not specified.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.158
EPSS Ranking 94.3%
CVSS Severity
CVSS v2 Score 4.3
References
Products affected by CVE-2006-5752


Contact Us

Shodan ® - All rights reserved