CVE:CVE-2007-6388
CNNVD:CNNVD-200801-095
在Apache HTTP Server 2.2.0 至 2.2.6, 2.0.35 至 2.0.61, and 1.3.2 至 1.3.39的mod_status中的跨站脚本攻击漏洞在server-status页激活的情况下会允许远程攻击者借助未知名的向量注入任意的网站脚本或HTML。
solution:Upgrade apache http_server to a higher version than -,1.3.1,1.3.2,1.3.3,1.3.4,1.3.5,1.3.6,1.3.7,1.3.8,1.3.9,1.3.11,1.3.12,1.3.22,1.3.23,1.3.24,1.3.25,1.3.26,1.3.27,1.3.28,1.3.29,1.3.30,1.3.31,1.3.32,1.3.33,1.3.37,1.3.38,1.3.39,2.0.35,2.0.36,2.0.37,2.0.38,2.0.39,2.0.40,2.0.41,2.0.42,2.0.43,2.0.44,2.0.45,2.0.46,2.0.47,2.0.48,2.0.49,2.0.50,2.0.51,2.0.52,2.0.53,2.0.54,2.0.55,2.0.56,2.0.57,2.0.58,2.0.59,2.0.60,2.0.61,2.2,2.2.1,2.2.2,2.2.3,2.2.4,2.2.6,and avoid the version 1.3.1,1.3.2,1.3.3,1.3.4,1.3.5,1.3.6,1.3.7,1.3.8,1.3.9,1.3.11,1.3.12,1.3.22,1.3.23,1.3.24,1.3.25,1.3.26,1.3.27,1.3.28,1.3.29,1.3.30,1.3.31,1.3.32,1.3.33,1.3.37,1.3.38,1.3.39,2.0.35,2.0.36,2.0.37,2.0.38,2.0.39,2.0.40,2.0.41,2.0.42,2.0.43,2.0.44,2.0.45,2.0.46,2.0.47,2.0.48,2.0.49,2.0.50,2.0.51,2.0.52,2.0.53,2.0.54,2.0.55,2.0.56,2.0.57,2.0.58,2.0.59,2.0.60,2.0.61,2.2,2.2.1,2.2.2,2.2.3,2.2.4,2.2.6