Apache unfiltered HTTP methods
Published:		25.04.2007
Source:		BUGTRAQ
SecurityVulns ID:		7637
Type:		remote
Level:		4/10
Description:		HTTP request method is not checked for RFC2616 complience. Under specific conditions it may lead, for example, to crossite scripting.

Original document

Michal Majchrowicz, [Full-disclosure] Apache/PHP REQUEST_METHOD XSS Vulnerability (25.04.2007)

Discuss:

Read or add your comments to this news (0 comments)