Unrated severityNVD Advisory· Published Apr 7, 2009· Updated Apr 23, 2026
CVE-2009-0796
CVE-2009-0796
Description
Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in mod_perl1 and mod_perl2 for the Apache HTTP Server, when /perl-status is accessible, allows remote attackers to inject arbitrary web script or HTML via the URI.
Affected products
2Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
17- svn.apache.org/viewvcnvdPatchVendor Advisory
- www.gossamer-threads.com/lists/modperl/modperl-cvs/99477nvdExploit
- www.gossamer-threads.com/lists/modperl/modperl/99475nvdExploit
- lists.apple.com/archives/security-announce/2010//Nov/msg00000.htmlnvd
- secunia.com/advisories/34597nvd
- sunsolve.sun.com/search/document.donvd
- sunsolve.sun.com/search/document.donvd
- support.apple.com/kb/HT4435nvd
- svn.apache.org/viewvc/perl/modperl/branches/1.x/lib/Apache/Status.pmnvd
- www.mandriva.com/security/advisoriesnvd
- www.securityfocus.com/archive/1/502709/100/0/threadednvd
- www.securityfocus.com/bid/34383nvd
- www.securitytracker.com/idnvd
- www.vupen.com/english/advisories/2009/0943nvd
- bugzilla.redhat.com/show_bug.cginvd
- launchpad.net/bugs/cve/2009-0796nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8488nvd
News mentions
0No linked articles in our index yet.