| Package | Affected versions | Patched versions |
|---|---|---|
| http server | ≥ 1.3.2, < 1.3.39≥ 2.0.0, < 2.0.61≥ 2.2.0, < 2.2.6 | 1.3.392.0.612.2.6 |
Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform "charset detection" when the content-type is not specified.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free