CVE-2013-1862

mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via an HTTP request containing an escape sequence for a terminal emulator.

We have discovered 397,510 live websites that are affected by CVE-2013-1862.

Test my site



Affected Software

Product  Apache
Category Web Servers
Vulnerable Domains397,510 live websites (12.60% of Apache install base)
Vulnerable Versions
  • from 0 before 2.2.25
Vulnerable Versions Count77 versions ( 52.38% of all versions)



Details

  • Published - Jun 11, 2013
  • Updated - Aug 6, 2024

CVE-2013-1862 usage by Country

United States56,052 websites


Taiwan105,094 websites
Germany38,673 websites
Japan25,142 websites
Russia17,192 websites
France14,693 websites
Czech Republic11,822 websites
GB11,483 websites
Netherlands9,923 websites
Korea, South9,383 websites

CVE-2013-1862 usage by TLD

.com174,913 websites
.de30,315 websites
.net16,683 websites
.ru14,951 websites
.org12,463 websites
.info9,777 websites
.cz9,621 websites
.jp7,985 websites
.nl6,445 websites
.it6,319 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2013-1862

Top websites that are affected by CVE-2013-1862. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*****.***********.com Canada***
*********.******.net United States*,***
****.**.pl Poland*,***
******.com Japan*,***
********.********.de Germany*,***
******.****************.com United States*,***
****.***********.de Germany*,***
**********.com United States*,***
****.**********.com United States*,***
*****.**********.com United States*,***
See full domain list

FAQ

A total of 397,510 websites have been identified as vulnerable to CVE-2013-1862, discovered through global website indexing conducted by WebTechSurvey.
Apache is susceptible to CVE-2013-1862 vulnerability.
Apache versions before 2.2.25 are vulnerable to CVE-2013-1862.
Version 2.2.25 of Apache addresses the CVE-2013-1862 security vulnerability.

References