NetSight
IP …
medium4.3

CVE-2007-5000

Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the (2) mod_im…

Impact

Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the (2) mod_imagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

VendorProductAffected versions
ApacheHttp Server
from 1.3.0 through 1.3.39
from 2.0.35 through 2.0.61
from 2.2.0 through 2.2.6
FedoraprojectFedora
Versions 7, 8
CanonicalUbuntu Linux
Versions 6.06, 6.10, 7.04, 7.10
OpensuseOpensuse
Versions 10.2, 10.3
SuseLinux Enterprise Desktop
Version 9
SuseLinux Enterprise Server
Versions 9, 10
OracleHttp Server
Version 10.1.3.5.0

Weakness classification

CWE-79

References