CVE-2007-2808 Cross-site scripting (XSS) vulnerability in gnatsweb.pl in Gnatsweb 4.00 and Gnats 4.1.99 allows remote attackers to inject arbitrary web script or HTML via the database parameter.
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in gnatsweb.pl in Gnatsweb 4.00 and Gnats 4.1.99 allows remote attackers to inject arbitrary web script or HTML via the database parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU gnats | = 4.1.99 | No fix listed |
| yngve svendsen gnatsweb | = 4.00 | No fix listed |
References
- 36224 vdb-entry
- pridels-team.blogspot.com
- 25333 third-party-advisory vendor-advisory
- 28743 third-party-advisory
- DSA-1486 vendor-advisory
- 24081 vdb-entry
- ADV-2007-1886 vdb-entry
- gnats-gnatsweb-xss(34392) vdb-entry