Trustwave

Modsecurity

14 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2012-2751

  • EPSS 1.76%
  • Published 22.07.2012 16:55:27
  • Last modified 11.04.2025 00:51:21

ModSecurity before 2.6.6, when used with PHP, does not properly handle single quotes not at the beginning of a request parameter value in the Content-Disposition field of a request with a multipart/form-data Content-Type header, which allows remote a...

4.3

CVE-2009-5031

  • EPSS 0.8%
  • Published 22.07.2012 16:55:17
  • Last modified 11.04.2025 00:51:21

ModSecurity before 2.5.11 treats request parameter values containing single quotes as files, which allows remote attackers to bypass filtering rules and perform other attacks such as cross-site scripting (XSS) attacks via a single quote in a request ...

5

CVE-2009-1902

Exploit
  • EPSS 13.79%
  • Published 03.06.2009 17:00:00
  • Last modified 09.04.2025 00:30:58

The multipart processor in ModSecurity before 2.5.9 allows remote attackers to cause a denial of service (crash) via a multipart form datapost request with a missing part header name, which triggers a NULL pointer dereference.

4.3

CVE-2009-1903

  • EPSS 1.92%
  • Published 03.06.2009 17:00:00
  • Last modified 09.04.2025 00:30:58

The PDF XSS protection feature in ModSecurity before 2.5.8 allows remote attackers to cause a denial of service (Apache httpd crash) via a request for a PDF file that does not use the GET method.