Skip to main content

CVE detail

CVE-2000-1205

Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other web site visitors via (1) the printenv CGI (printenv.pl), which does not encode its output, (2) pages generated by the ap_send_error_response function such as a default 404, which does not add an explicit charset, or (3) various messages that are generated by certain Apache modules or core code. NOTE: the printenv issue might still exist for web browsers that can render text/plain content types as HTML, such as Internet Explorer, but CVE regards this as a design limitation of those browsers, not Apache. The printenv.pl/acuparam vector, discloser on 20070724, is one such variant.

CVSS 4.3 · MediumBuzz score 8.02 OTX pulses

Buzz score

Why this CVE is surfacing

Buzz score total 8.0

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 0.0 · diversity 0.0 · KEV 0.0 · OTX 8.0 · PoC 0.0
Mention score
0.0
0 evidence mentions in the snapshot
Diversity score
0.0
0 sources across 0 categories
KEV score
0.0
No KEV entry observed
OTX score
8.0
2 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
0 source links · newest first

    Exploit code

    Public exploit repository references

    Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

    0 repository references · best confidence N/A · max 0 stars
    No public PoC repositories have been matched yet.

    Related records

    Similar CVEs

    6 related CVEs with shared weakness or product evidence