Description

Multiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving hostnames and URIs in the (1) mod_imagemap, (2) mod_info, (3) mod_ldap, (4) mod_proxy_ftp, and (5) mod_status modules.

Remediation

References

CVE-2012-3499

Related Vulnerabilities

WordPress Plugin myLinksDump 'url' Parameter SQL Injection (1.2)

WordPress Improper Privilege Management Vulnerability (CVE-2020-28035)

Drupal Core 4.5.x Cross-Site Scripting (4.5.0 - 4.5.7)

WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2017-5645)

Microsoft SQL Server Other Vulnerability (CVE-2001-0344)

Severity

Medium

Classification

CVE-2012-3499 CWE-707

Tags

Missing Update Known Vulnerabilities