NVD

Id
58416  
Name
CVE-2007-6421  
Description
Cross-site scripting (XSS) vulnerability in balancer-manager in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) ss, (2) wr, or (3) rr parameters, or (4) the URL.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2008-01-08  
Modified Date
2011-03-07  
Seq
2007-6421  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
299615 58416 CVE-2007-6421 http://docs.info.apple.com/article.html?artnum=307562  View
299616 58416 CVE-2007-6421 http://httpd.apache.org/security/vulnerabilities_22.html  View
299617 58416 CVE-2007-6421 APPLE-SA-2008-03-18  View
299618 58416 CVE-2007-6421 SUSE-SA:2008:021  View
299619 58416 CVE-2007-6421 oval:org.mitre.oval:def:10664  View
299620 58416 CVE-2007-6421 oval:org.mitre.oval:def:8651  View
299621 58416 CVE-2007-6421 3523  View
299622 58416 CVE-2007-6421 MDVSA-2008:016  View
299623 58416 CVE-2007-6421 RHSA-2008:0008  View
299624 58416 CVE-2007-6421 RHSA-2008:0009  View
299625 58416 CVE-2007-6421 20080110 SecurityReason - Apache2 CSRF, XSS, Memory Corruption and Denial of Service Vulnerability  View
299626 58416 CVE-2007-6421 27236  View
299627 58416 CVE-2007-6421 USN-575-1  View
299628 58416 CVE-2007-6421 ADV-2008-0048  View
299629 58416 CVE-2007-6421 ADV-2008-0924  View
299630 58416 CVE-2007-6421 apache-modproxybalancer-xss(39474)  View
299631 58416 CVE-2007-6421 FEDORA-2008-1711  View
299632 58416 CVE-2007-6421 FEDORA-2008-1695  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45692 JVNDB-2008-001002 Apache HTTP Server の mod_proxy_balancer における複数のクロスサイトスクリプティングの脆弱性 Apache HTTP Server には、mod_proxy_balancer の balancer-manager に、ss、wr、rr パラメータ、および URL の取り扱いに不備があり、複数のクロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-6421 29776 CVE-2007-6421 58416 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001002.html 2008-01-08 2008-04-01 View