Lucene search
EmgentEXPLOITPACK:D081201B08D00FAA1A8DD3F8F37675C6HistoryDec 15, 2010 - 12:00 a.m.
gitWeb 1.7.3.3 - Cross-Site Scripting
2010-12-1500:00:00
emgent
6
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
gitWeb 1.7.3.3 - Cross-Site Scripting
>-8 Description 8-<
Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and previous versions
allows remote attackers to inject arbitrary web script or HTML code via f and fp variables.
>-8 Proof Of Concept 8-<
http://localhost/?p=foo/bar/ph33r.git;a=blobdiff;f=[XSS];fp=[XSS]
[XSS] => "><body onload="alert('xss')"> <a
>-8 Credits 8-<
Emanuele 'emgent' Gentili <[email protected]>
>-8 Responsible Disclosure 8-<
13-12-2010 Initial contact with upstream and vendor-sec
13-12-2010 Vendor Response and CVE-2010-3906 assignation
15-12-2010 Public DisclosureRelated
prion
prion
Cross site scripting
2010-12-17 19:00:00
openvas
openvas
Mandriva Update for git MDVSA-2010:256 (git)
2010-12-28 00:00:00
Fedora Update for git FEDORA-2010-18981
2010-12-28 00:00:00
Mandriva Update for git MDVSA-2010:256 (git)
2010-12-28 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: git-1.7.3.4-1.fc14
2010-12-23 19:57:37
[SECURITY] Fedora 13 Update: git-1.7.3.4-1.fc13
2011-01-03 20:00:05
nessus
nessus
RHEL 6 : git (RHSA-2010:1003)
2010-12-22 00:00:00
Git gitweb Multiple Parameter XSS
2010-12-23 00:00:00
Scientific Linux Security Update : git on SL6.x i386/x86_64
2012-08-01 00:00:00
debian
debian
[BSA-024] Security Update for git
2011-02-27 20:18:50
cvelist
cvelist
CVE-2010-3906
2010-12-17 18:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package git version 1.7.3.4-alt1
2010-12-16 00:00:00
Security fix for the ALT Linux 5 package git version 1.7.3.5-alt0.M50P.1
2011-01-20 00:00:00
Security fix for the ALT Linux 8 package git version 1.7.3.4-alt1
2010-12-16 00:00:00
packetstorm
packetstorm
Gitweb 1.7.3.3 Cross Site Scripting
2010-12-16 00:00:00
debiancve
debiancve
CVE-2010-3906
2010-12-17 19:00:00
oraclelinux
oraclelinux
git security update
2011-02-10 00:00:00
git security update
2013-03-04 00:00:00
cve
cve
CVE-2010-3906
2010-12-17 19:00:00
seebug
seebug
Gitweb <= 1.7.3.3 - Cross Site Scripting
2014-07-01 00:00:00
redhat
redhat
(RHSA-2010:1003) Moderate: git security update
2010-12-21 00:00:00
ubuntucve
ubuntucve
CVE-2010-3906
2010-12-17 00:00:00
exploitdb
exploitdb
gitWeb 1.7.3.3 - Cross-Site Scripting
2010-12-15 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
Related for EXPLOITPACK:D081201B08D00FAA1A8DD3F8F37675C6