info
discussion
exploit
solution
references
Apache HTTP Server 413 Error HTTP Request Method Cross-Site Scripting Weakness
References:
Apache Homepage
(Apache Software Foundation)
ASF Bugzilla Bug 44014
(Apache Software Foundation)
httpd 2.2.8 Changelog
(Apache Software Foundation)
PK65782; 2.0.47.1: IBM HTTP Server V2.0.47 Cumulative Interim Fix
(IBM)
PTF MH01110 - Security fixes for HMC V6R1.3
(IBM)
PR07-37: XSS on Apache HTTP Server 413 error pages via malformed HTTP method
(research@procheckup.com)
Interstage HTTP Server: Cross-site Scripting Problem (CVE-2007-4465/ CVE-2007-62
(Fujitsu)
PK57952: INPUT METHOD NOT ESCAPED IN DEFAULT 413 ERROR RESPONSE
(IBM)
Privacy Statement
Copyright 2010, SecurityFocus