Description

mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduct cross-site scripting (XSS) attacks using UTF-7 encoding.

Remediation

References

CVE-2008-0005

Related Vulnerabilities

WordPress Plugin Ivory Search-WordPress Search Cross-Site Scripting (4.6)

Oracle Database Server CVE-2009-1971 Vulnerability (CVE-2009-1971)

MySQL CVE-2021-2001 Vulnerability (CVE-2021-2001)

Oracle Database Server CVE-2011-0785 Vulnerability (CVE-2011-0785)

Jenkins Incorrect Authorization Vulnerability (CVE-2021-21670)

Severity

Medium

Classification

CVE-2008-0005 CWE-707

Tags

Missing Update Known Vulnerabilities