CVE-2006-5752

medium Apache
CVSS v3 Base Score
4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS Score
18.4%
Exploitation probability in 30 days
Top 5% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
M
Confidentiality
None
Integrity
P
Availability
None
Published: June 27, 2007 (6896 days ago)
Last Modified: April 23, 2026
Vendor: Apache
Source: NVD

Description

Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform "charset detection" when the content-type is not specified.

CWE

NVD-CWE-Other

Affected Products

apache http servercanonical ubuntu linuxfedoraproject fedoraredhat enterprise linux desktopredhat enterprise linux eusredhat enterprise linux serverredhat enterprise linux workstation

References

🔗 bugs.gentoo.org 🔗 bugzilla.redhat.com 🔗 h20000.www2.hp.com 🔗 httpd.apache.org 🔗 httpd.apache.org