EDB-18442

functional

Apache - httpOnly Cookie Disclosure

view exploit source exploit_dbverifiedtype remoteauthor pilatepublished 2012-01-31catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2012-0053USmedium4.3Exploit
protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows r…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan