CVE-2007-6388: XSS
Cross-site scripting (XSS) vulnerability in modstatus in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2007-6388?
CVE-2007-6388 is classified as a medium severity vulnerability that can allow cross-site scripting (XSS) attacks on the affected versions of Apache HTTP Server.
How do I fix CVE-2007-6388?
To fix CVE-2007-6388, upgrade your Apache HTTP Server to version 2.2.7 or later, or apply applicable patches from the vendor.
Which versions are affected by CVE-2007-6388?
CVE-2007-6388 affects Apache HTTP Server versions 1.3.2 through 1.3.39, 2.0.35 through 2.0.61, and 2.2.0 through 2.2.6.
What type of vulnerability is CVE-2007-6388?
CVE-2007-6388 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary web scripts or HTML.
Can CVE-2007-6388 be exploited remotely?
Yes, CVE-2007-6388 can be exploited remotely if the server-status page is enabled in the affected Apache HTTP Server versions.