Description

Multiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving hostnames and URIs in the (1) mod_imagemap, (2) mod_info, (3) mod_ldap, (4) mod_proxy_ftp, and (5) mod_status modules.

Remediation

References

CVE-2012-3499

Related Vulnerabilities

Oracle Application Server Other Vulnerability (CVE-2004-1707)

Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-35361)

WordPress Plugin Timed Popup Cross-Site Request Forgery (1.3)

WordPress Plugin Comments-wpDiscuz Cross-Site Scripting (3.1.4)

MySQL CVE-2022-21348 Vulnerability (CVE-2022-21348)

Severity

Medium

Classification

CVE-2012-3499 CWE-707

Tags

Missing Update Known Vulnerabilities