Total vulnerabilities in the database
Cross-site scripting (XSS) vulnerability in Cherokee HTTPD 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a malformed request that generates an HTTP 400 error, which is not properly handled when the error message is generated.
| Software | From | Fixed in |
|---|---|---|
| cherokee / cherokee_httpd | 0.4.6 | 0.4.6.x |
| cherokee / cherokee_httpd | 0.5 | 0.5.x |
| cherokee / cherokee_httpd | 0.2 | 0.2.x |
| cherokee / cherokee_httpd | 0.4.9 | 0.4.9.x |
| cherokee / cherokee_httpd | 0.1.6 | 0.1.6.x |
| cherokee / cherokee_httpd | 0.2.6 | 0.2.6.x |
| cherokee / cherokee_httpd | 0.2.5 | 0.2.5.x |
| cherokee / cherokee_httpd | 0.4.17 | 0.4.17.x |
| cherokee / cherokee_httpd | 0.1 | 0.1.x |
| cherokee / cherokee_httpd | 0.4.8 | 0.4.8.x |
| cherokee / cherokee_httpd | 0.2.7 | 0.2.7.x |
| cherokee / cherokee_httpd | 0.4.7 | 0.4.7.x |
| cherokee / cherokee_httpd | 0.1.5 | 0.1.5.x |