admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-06 02:31:38 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2009/CVE-2009-4487.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

799 B
Raw Blame History

CVE-2009-4487

Description

nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.

POC

Reference

Github