cve/2008/CVE-2008-0005.md

CVE-2008-0005

Description

mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduct cross-site scripting (XSS) attacks using UTF-7 encoding.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/DButter/whitehat_public
• https://github.com/Dokukin1/Metasploitable
• https://github.com/Iknowmyname/Nmap-Scans-M2
• https://github.com/Live-Hack-CVE/CVE-2008-0005
• https://github.com/NikulinMS/13-01-hw
• https://github.com/Zhivarev/13-01-hw
• https://github.com/kasem545/vulnsearch
• https://github.com/smabramov/Vulnerabilities-and-attacks-on-information-systems
• https://github.com/zzzWTF/db-13-01