CVE-2009-0796

Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in...

2.6 LowPublic exploitFix available

Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in mod_perl1 and mod_perl2 for the Apache HTTP Server, when /perl-status is accessible, allows remote attackers to inject arbitrary web script or HTML via the URI.

Exploit likelihood

29.6%Up 23.2 points since Feb 4, 2022

What each source reports

NVD Score used 2.6

Record: CVE-2009-0796
CVSS 2.0: 2.6 LowAV:N/AC:H/Au:N/C:N/I:P/A:N
Weakness: CWE-79
Updated: 2026-11-02

CVE List No score

Record: CVE-2009-0796
Updated: 2026-11-02

EUVDEUVD-2009-0794 No score

Record: EUVD-2009-0794
Updated: 2026-11-03

GitHub AdvisoriesGHSA-22g4-6c36-68p9 No score

Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in...

Record: GHSA-22g4-6c36-68p9
Weakness: CWE-79
Updated: 2026-11-02

OSV No score

Record: CVE-2009-0796
Updated: 2026-11-02

OSVDEBIAN-CVE-2009-0796 No score

Record: DEBIAN-CVE-2009-0796
Updated: 2026-11-02

Affected products

apache mod perl

Affected packages

Affected packages
Package	Affected	Fixed
`libapache2-mod-perl2` Debian:12	before 2.0.4-6	2.0.4-6
`libapache2-mod-perl2` Debian:13	before 2.0.4-6	2.0.4-6
`libapache2-mod-perl2` Debian:14	before 2.0.4-6	2.0.4-6

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Apache mod_perl - 'Apache::Status' / 'Apache2::Status' Cross-Site Scripting	2009-11-09

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-0796 is a low vulnerability (CVSS 2.6) in Apache Mod Perl, published April 7, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 29.6%, the 98th percentile. Fixed in libapache2-mod-perl2 2.0.4-6.

References

Show 15 moreShow less