Description

cachemgr.cgi in Squid 3.1.x and 3.2.x, possibly 3.1.22, 3.2.4, and other versions, allows remote attackers to cause a denial of service (resource consumption) via a crafted request. NOTE: this issue is due to an incorrect fix for CVE-2012-5643, possibly involving an incorrect order of arguments or incorrect comparison.

Remediation

References

CVE-2013-0189

Related Vulnerabilities

WordPress Plugin Abandoned Cart Lite for WooCommerce SQL Injection (1.8)

Oracle Application Server Other Vulnerability (CVE-2007-0281)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-0725)

Vanilla Forums Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8279)

Joomla! Core 1.0.5 Security Bypass (1.0.5)

Severity

Medium

Classification

CVE-2013-0189 CWE-119

Tags

Missing Update Known Vulnerabilities