- Home
- CVEs with nessus.description==According to its banner, the version of Apache running on the remote
host does not properly escape filenames in 406 responses. A remote
attacker can exploit this to inject arbitrary HTTP headers or conduct
cross-site scripting attacks by uploading a file with a specially
crafted name.
Note that the remote web server may not actually be affected by these
vulnerabilities as Nessus has relied solely on the version number in
the server's banner.
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top