Search for vulnerabilities
Vulnerability details: VCID-8rr4-7xg6-8bfk
Vulnerability ID VCID-8rr4-7xg6-8bfk
Aliases CVE-2006-5752
Summary A flaw was found in the mod_status module. On sites where the server-status page is publicly accessible and ExtendedStatus is enabled this could lead to a cross-site scripting attack. Note that the server-status page is not enabled by default and it is best practice to not make this publicly available.
Status Published
Exploitability 0.5
Weighted Severity 4.8
Risk 2.4
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
System Score Found at
epss 0.06389 https://api.first.org/data/v1/epss?cve=CVE-2006-5752
epss 0.06389 https://api.first.org/data/v1/epss?cve=CVE-2006-5752
epss 0.06389 https://api.first.org/data/v1/epss?cve=CVE-2006-5752
epss 0.11133 https://api.first.org/data/v1/epss?cve=CVE-2006-5752
epss 0.11133 https://api.first.org/data/v1/epss?cve=CVE-2006-5752
epss 0.12764 https://api.first.org/data/v1/epss?cve=CVE-2006-5752
epss 0.12764 https://api.first.org/data/v1/epss?cve=CVE-2006-5752
epss 0.12764 https://api.first.org/data/v1/epss?cve=CVE-2006-5752
epss 0.12764 https://api.first.org/data/v1/epss?cve=CVE-2006-5752
epss 0.12764 https://api.first.org/data/v1/epss?cve=CVE-2006-5752
epss 0.12764 https://api.first.org/data/v1/epss?cve=CVE-2006-5752
epss 0.12764 https://api.first.org/data/v1/epss?cve=CVE-2006-5752
epss 0.12764 https://api.first.org/data/v1/epss?cve=CVE-2006-5752
epss 0.12764 https://api.first.org/data/v1/epss?cve=CVE-2006-5752
epss 0.12764 https://api.first.org/data/v1/epss?cve=CVE-2006-5752
epss 0.12764 https://api.first.org/data/v1/epss?cve=CVE-2006-5752
epss 0.12764 https://api.first.org/data/v1/epss?cve=CVE-2006-5752
epss 0.12764 https://api.first.org/data/v1/epss?cve=CVE-2006-5752
epss 0.12764 https://api.first.org/data/v1/epss?cve=CVE-2006-5752
epss 0.12764 https://api.first.org/data/v1/epss?cve=CVE-2006-5752
epss 0.12764 https://api.first.org/data/v1/epss?cve=CVE-2006-5752
epss 0.12764 https://api.first.org/data/v1/epss?cve=CVE-2006-5752
epss 0.12764 https://api.first.org/data/v1/epss?cve=CVE-2006-5752
epss 0.12764 https://api.first.org/data/v1/epss?cve=CVE-2006-5752
apache_httpd moderate https://httpd.apache.org/security/json/CVE-2006-5752.json
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5752.json
https://api.first.org/data/v1/epss?cve=CVE-2006-5752
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5752
245112 https://bugzilla.redhat.com/show_bug.cgi?id=245112
CVE-2006-5752 https://httpd.apache.org/security/json/CVE-2006-5752.json
RHSA-2007:0532 https://access.redhat.com/errata/RHSA-2007:0532
RHSA-2007:0533 https://access.redhat.com/errata/RHSA-2007:0533
RHSA-2007:0534 https://access.redhat.com/errata/RHSA-2007:0534
RHSA-2007:0556 https://access.redhat.com/errata/RHSA-2007:0556
RHSA-2007:0557 https://access.redhat.com/errata/RHSA-2007:0557
RHSA-2008:0263 https://access.redhat.com/errata/RHSA-2008:0263
RHSA-2008:0523 https://access.redhat.com/errata/RHSA-2008:0523
USN-499-1 https://usn.ubuntu.com/499-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.90698
EPSS Score 0.06389
Published At Aug. 1, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:28:44.867815+00:00 Apache HTTPD Importer Import https://httpd.apache.org/security/json/CVE-2006-5752.json 37.0.0