cve/2007/CVE-2007-6388.md

CVE-2007-6388

Description

Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

POC

Reference

• http://securityreason.com/securityalert/3541
• http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/SecureAxom/strike
• https://github.com/kasem545/vulnsearch
• https://github.com/xxehacker/strike