Search for vulnerabilities
Vulnerability details: VCID-upgx-p9mx-2qew
Vulnerability ID VCID-upgx-p9mx-2qew
Aliases CVE-2008-0005
Summary A workaround was added in the mod_proxy_ftp module. On sites where mod_proxy_ftp is enabled and a forward proxy is configured, a cross-site scripting attack is possible against Web browsers which do not correctly derive the response character set following the rules in RFC 2616.
Status Published
Exploitability 0.5
Weighted Severity 2.1
Risk 1.1
Affected and Fixed Packages Package Details
Weaknesses (1)
System Score Found at
epss 0.03487 https://api.first.org/data/v1/epss?cve=CVE-2008-0005
epss 0.03487 https://api.first.org/data/v1/epss?cve=CVE-2008-0005
epss 0.03487 https://api.first.org/data/v1/epss?cve=CVE-2008-0005
epss 0.03487 https://api.first.org/data/v1/epss?cve=CVE-2008-0005
epss 0.03487 https://api.first.org/data/v1/epss?cve=CVE-2008-0005
epss 0.03487 https://api.first.org/data/v1/epss?cve=CVE-2008-0005
epss 0.03487 https://api.first.org/data/v1/epss?cve=CVE-2008-0005
epss 0.03487 https://api.first.org/data/v1/epss?cve=CVE-2008-0005
epss 0.03487 https://api.first.org/data/v1/epss?cve=CVE-2008-0005
epss 0.03487 https://api.first.org/data/v1/epss?cve=CVE-2008-0005
epss 0.03487 https://api.first.org/data/v1/epss?cve=CVE-2008-0005
epss 0.03487 https://api.first.org/data/v1/epss?cve=CVE-2008-0005
epss 0.03487 https://api.first.org/data/v1/epss?cve=CVE-2008-0005
epss 0.03487 https://api.first.org/data/v1/epss?cve=CVE-2008-0005
epss 0.03487 https://api.first.org/data/v1/epss?cve=CVE-2008-0005
epss 0.03487 https://api.first.org/data/v1/epss?cve=CVE-2008-0005
epss 0.03487 https://api.first.org/data/v1/epss?cve=CVE-2008-0005
epss 0.03487 https://api.first.org/data/v1/epss?cve=CVE-2008-0005
epss 0.03487 https://api.first.org/data/v1/epss?cve=CVE-2008-0005
epss 0.03487 https://api.first.org/data/v1/epss?cve=CVE-2008-0005
epss 0.09089 https://api.first.org/data/v1/epss?cve=CVE-2008-0005
epss 0.09089 https://api.first.org/data/v1/epss?cve=CVE-2008-0005
apache_httpd low https://httpd.apache.org/security/json/CVE-2008-0005.json
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.87137
EPSS Score 0.03487
Published At Aug. 17, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:28:48.296823+00:00 Apache HTTPD Importer Import https://httpd.apache.org/security/json/CVE-2008-0005.json 37.0.0