CVE-2008-0005

mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers…

published January 12, 2008

CVSS
—
EPSS
15%
Percentile
96.7
In the wild
Unconfirmed
What it is

mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduct cross-site scripting (XSS) attacks using UTF-7 encoding.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.14727 · 96.7th percentile
Published
2008-01-12T00:00Z
EPSS history
Timeline
  • 12 JAN 00:00Z
    mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers…
    cvelistv5