Lucene search
Ubuntu.comUB:CVE-2010-3906HistoryDec 17, 2010 - 12:00 a.m.
CVE-2010-3906
2010-12-1700:00:00
ubuntu.com
ubuntu.com
7
0.03 Low
EPSS
Percentile
90.9%
Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier
allows remote attackers to inject arbitrary web script or HTML via the (1)
f and (2) fp parameters.
Notes
| Author | Note |
|---|---|
| mdeslaur | git in dapper and hardy is something unrelated |
| sbeattie | fix is needed in hardy, though half the functions that it applies to don’t exist. Also needs examination for other locations. Did not inspect dapper. |
Related
prion
prion
Cross site scripting
2010-12-17 19:00:00
openvas
openvas
Mandriva Update for git MDVSA-2010:256 (git)
2010-12-28 00:00:00
Fedora Update for git FEDORA-2010-18981
2010-12-28 00:00:00
Mandriva Update for git MDVSA-2010:256 (git)
2010-12-28 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: git-1.7.3.4-1.fc14
2010-12-23 19:57:37
[SECURITY] Fedora 13 Update: git-1.7.3.4-1.fc13
2011-01-03 20:00:05
nessus
nessus
RHEL 6 : git (RHSA-2010:1003)
2010-12-22 00:00:00
Git gitweb Multiple Parameter XSS
2010-12-23 00:00:00
Scientific Linux Security Update : git on SL6.x i386/x86_64
2012-08-01 00:00:00
debian
debian
[BSA-024] Security Update for git
2011-02-27 20:18:50
exploitpack
exploitpack
gitWeb 1.7.3.3 - Cross-Site Scripting
2010-12-15 00:00:00
cvelist
cvelist
CVE-2010-3906
2010-12-17 18:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package git version 1.7.3.4-alt1
2010-12-16 00:00:00
Security fix for the ALT Linux 5 package git version 1.7.3.5-alt0.M50P.1
2011-01-20 00:00:00
Security fix for the ALT Linux 8 package git version 1.7.3.4-alt1
2010-12-16 00:00:00
packetstorm
packetstorm
Gitweb 1.7.3.3 Cross Site Scripting
2010-12-16 00:00:00
debiancve
debiancve
CVE-2010-3906
2010-12-17 19:00:00
oraclelinux
oraclelinux
git security update
2011-02-10 00:00:00
git security update
2013-03-04 00:00:00
cve
cve
CVE-2010-3906
2010-12-17 19:00:00
seebug
seebug
Gitweb <= 1.7.3.3 - Cross Site Scripting
2014-07-01 00:00:00
redhat
redhat
(RHSA-2010:1003) Moderate: git security update
2010-12-21 00:00:00
exploitdb
exploitdb
gitWeb 1.7.3.3 - Cross-Site Scripting
2010-12-15 00:00:00