Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2009-0796

Description

Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in mod_perl1 and mod_perl2 for the Apache HTTP Server, when /perl-status is accessible, allows remote attackers to inject arbitrary web script or HTML via the URI.

POC

Reference

- https://bugzilla.redhat.com/show_bug.cgi?id=494402

Github

- https://github.com/dusbot/cpe2cve

- https://github.com/mimishak-um/Vulnerability-Scanner

- https://github.com/royans/aprober

- https://github.com/xonoxitron/cpe2cve