Description

IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request.

Remediation

References

CVE-1999-0448

Related Vulnerabilities

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-38264)

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-25276)

WordPress Plugin ADIF Log Search Widget Cross-Site Scripting (1.0e)

MySQL CVE-2013-3801 Vulnerability (CVE-2013-3801)

WordPress Plugin MDC YouTube Downloader Local File Inclusion (2.1.0)

Severity

Medium

Classification

CVE-1999-0448

Tags

Missing Update Known Vulnerabilities