Skip to content

CVE-2010-3906 Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) f and (2) fp parameters.

MediumCVSS 4.3 EPSS 5.6% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) f and (2) fp parameters.

Affected products

ProductAffected versionsFixed in
git = 0.99.9j No fix listed
git = 0.99.9k No fix listed
git = 0.99.9l No fix listed
git = 0.99.9m No fix listed
git = 0.99.9n No fix listed
git = 1.0.0 No fix listed
git = 1.0.0b No fix listed
git = 1.0.3 No fix listed
git = 1.0.4 No fix listed
git = 1.0.5 No fix listed
git = 1.0.6 No fix listed
git = 1.0.7 No fix listed
git = 1.0.8 No fix listed
git = 1.1.0 No fix listed
git = 1.1.1 No fix listed
git = 1.1.2 No fix listed
git = 1.1.3 No fix listed
git = 1.1.4 No fix listed
git = 1.1.5 No fix listed
git = 1.1.6 No fix listed
git = 1.2.0 No fix listed
git = 1.2.1 No fix listed
git = 1.2.2 No fix listed
git = 1.2.3 No fix listed
git = 1.2.4 No fix listed
Show 148 more
ProductAffected versionsFixed in
git = 1.2.5 No fix listed
git = 1.2.6 No fix listed
git = 1.3.0 No fix listed
git = 1.3.1 No fix listed
git = 1.3.2 No fix listed
git = 1.3.3 No fix listed
git = 1.4.0 No fix listed
git = 1.4.1 No fix listed
git = 1.4.1.1 No fix listed
git = 1.4.2 No fix listed
git = 1.4.2.1 No fix listed
git = 1.4.2.2 No fix listed
git = 1.4.2.3 No fix listed
git = 1.4.2.4 No fix listed
git = 1.4.3 No fix listed
git = 1.4.3.1 No fix listed
git = 1.4.3.2 No fix listed
git = 1.4.3.3 No fix listed
git = 1.4.3.4 No fix listed
git = 1.4.3.5 No fix listed
git = 1.4.4 No fix listed
git = 1.4.4.1 No fix listed
git = 1.4.4.2 No fix listed
git = 1.4.4.3 No fix listed
git = 1.4.4.4 No fix listed
git = 1.4.4.5 No fix listed
git = 1.5.0 No fix listed
git = 1.5.0-rc2 No fix listed
git = 1.5.0-rc3 No fix listed
git = 1.5.0-rc4 No fix listed
git = 1.5.0.1 No fix listed
git = 1.5.0.2 No fix listed
git = 1.5.0.3 No fix listed
git = 1.5.0.4 No fix listed
git = 1.5.0.5 No fix listed
git = 1.5.0.6 No fix listed
git = 1.5.0.7 No fix listed
git = 1.5.1 No fix listed
git = 1.5.1.1 No fix listed
git = 1.5.1.2 No fix listed
git = 1.5.1.3 No fix listed
git = 1.5.1.4 No fix listed
git = 1.5.1.5 No fix listed
git = 1.5.1.6 No fix listed
git = 1.5.2 No fix listed
git = 1.5.2.1 No fix listed
git = 1.5.2.2 No fix listed
git = 1.5.2.3 No fix listed
git = 1.5.2.4 No fix listed
git = 1.5.2.5 No fix listed
git = 1.5.3 No fix listed
git = 1.5.3-rc4 No fix listed
git = 1.5.3-rc5 No fix listed
git = 1.5.3-rc7 No fix listed
git = 1.5.3.1 No fix listed
git = 1.5.3.2 No fix listed
git = 1.5.3.3 No fix listed
git = 1.5.3.4 No fix listed
git = 1.5.3.5 No fix listed
git = 1.5.3.6 No fix listed
git = 1.5.3.7 No fix listed
git = 1.5.3.8 No fix listed
git = 1.5.4 No fix listed
git = 1.5.4-rc0 No fix listed
git = 1.5.4-rc1 No fix listed
git = 1.5.4-rc1.1136.g2794 No fix listed
git = 1.5.4-rc2 No fix listed
git = 1.5.4-rc3 No fix listed
git = 1.5.4-rc4 No fix listed
git = 1.5.4-rc5 No fix listed
git = 1.5.4.1 No fix listed
git = 1.5.4.2 No fix listed
git = 1.5.4.3 No fix listed
git = 1.5.4.4 No fix listed
git = 1.5.4.5 No fix listed
git = 1.5.4.6 No fix listed
git = 1.5.4.7 No fix listed
git = 1.5.5 No fix listed
git = 1.5.5-rc1 No fix listed
git = 1.5.5-rc2 No fix listed
git = 1.5.5-rc3 No fix listed
git = 1.5.5.1 No fix listed
git = 1.5.5.2 No fix listed
git = 1.5.5.3 No fix listed
git = 1.5.5.3-r1 No fix listed
git = 1.5.5.4 No fix listed
git = 1.5.5.5 No fix listed
git = 1.5.5.6 No fix listed
git = 1.5.6 No fix listed
git = 1.5.6.1 No fix listed
git = 1.5.6.2 No fix listed
git = 1.5.6.3 No fix listed
git = 1.5.6.4 No fix listed
git = 1.5.6.5 No fix listed
git = 1.5.6.6 No fix listed
git = 1.5.6.6-rc0 No fix listed
git = 1.5.6.6-rc2 No fix listed
git = 1.5.6.6-rc3 No fix listed
git = 1.6.0 No fix listed
git = 1.6.0-rc1 No fix listed
git = 1.6.0-rc2 No fix listed
git = 1.6.0-rc3 No fix listed
git = 1.6.0.1 No fix listed
git = 1.6.0.2 No fix listed
git = 1.6.0.3 No fix listed
git = 1.6.0.4 No fix listed
git = 1.6.0.5 No fix listed
git = 1.6.0.6 No fix listed
git = 1.6.1 No fix listed
git = 1.6.1-rc1 No fix listed
git = 1.6.1-rc2 No fix listed
git = 1.6.1-rc3 No fix listed
git = 1.6.1-rc4 No fix listed
git = 1.6.1.4 No fix listed
git = 1.6.2 No fix listed
git = 1.6.2-rc1 No fix listed
git = 1.6.2.1 No fix listed
git = 1.6.2.2 No fix listed
git = 1.6.2.3 No fix listed
git = 1.6.2.4 No fix listed
git = 1.6.2.5 No fix listed
git = 1.6.3 No fix listed
git = 1.6.3-rc1 No fix listed
git = 1.6.3-rc2 No fix listed
git = 1.6.3-rc3 No fix listed
git = 1.6.3-rc4 No fix listed
git = 1.6.3.1 No fix listed
git = 1.6.3.2 No fix listed
git = 1.7.2 No fix listed
git = 1.7.2.1 No fix listed
git = 1.7.2.2 No fix listed
git = 1.7.2.3 No fix listed
git = 1.7.2.4 No fix listed
git = 1.7.2.5 No fix listed
git = 1.7.3 No fix listed
git = 1.7.3.1 No fix listed
git = 1.7.3.2 No fix listed
git-scm git <= 1.7.3.3 No fix listed
git-scm git = 0.01 No fix listed
git-scm git = 0.02 No fix listed
git-scm git = 0.03 No fix listed
git-scm git = 0.04 No fix listed
git-scm git = 0.5 No fix listed
git-scm git = 0.6.0 No fix listed
git-scm git = 0.7.0 No fix listed
debian/git(Debian:12) < 1:1.7.2.3-2.2 1:1.7.2.3-2.2
debian/git(Debian:13) < 1:1.7.2.3-2.2 1:1.7.2.3-2.2
debian/git(Debian:14) < 1:1.7.2.3-2.2 1:1.7.2.3-2.2

References