CVE-2007-5673 Cross-site scripting (XSS) vulnerability in cgi-bin/webif.exe in ifnet WebIf allows remote attackers to inject arbitrary web script or HTML via the cmd parameter.
MediumCVSS 4.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in cgi-bin/webif.exe in ifnet WebIf allows remote attackers to inject arbitrary web script or HTML via the cmd parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ifnet webif | All versions | No fix listed |
References
- 20071022 ifnet.it WEBIF XSS Vulnerability mailing-list
- 20071022 Re: [Full-disclosure] ifnet.it WEBIF XSS Vulnerability mailing-list
- 27365 third-party-advisory vendor-advisory
- 26164 exploit vdb-entry
- webif-cmd-xss(37367) vdb-entry