Lucene search
GoogleOSV:DSA-1486-1HistoryFeb 04, 2008 - 12:00 a.m.
gnatsweb - cross-site scripting
2008-02-0400:00:00
Google
osv.dev
8
EPSS
0.005
Percentile
77.2%
r0t discovered that gnatsweb, a web interface to GNU GNATS, did not
correctly sanitize the database parameter in the main CGI script. This
could allow the injection of arbitrary HTML, or JavaScript code.
For the stable distribution (etch), this problem has been fixed in version
4.00-1etch1.
We recommend that you upgrade your gnatsweb package.
References
Related
ubuntucve
ubuntucve
CVE-2007-2808
2007-05-22 00:00:00
nvd
nvd
CVE-2007-2808
2007-05-22 19:30:00
debian
debian
[SECURITY] [DSA 1486-1] New gnatsweb packages fix cross-site scripting
2008-02-05 17:09:37
openvas
openvas
Debian Security Advisory DSA 1486-1 (gnatsweb)
2008-02-05 00:00:00
Debian: Security Advisory (DSA-1486-1)
2008-02-05 00:00:00
cve
cve
CVE-2007-2808
2007-05-22 19:30:00
prion
prion
Cross site scripting
2007-05-22 19:30:00
cvelist
cvelist
CVE-2007-2808
2007-05-22 19:00:00
nessus
nessus
Debian DSA-1486-1 : gnatsweb - XSS
2008-02-05 00:00:00