Unscored CVE-2007-5477 EUVD-2007-5452GHSA-jjxg-hp5g-chxg

Cross-site scripting (XSS) vulnerability in auth.w in djeyl.net WebMod 0.48 Half-Life Dedicated Server plugin allows remote attackers to in…

Published Oct 16, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in auth.w in djeyl.net WebMod 0.48 Half-Life Dedicated Server plugin allows remote attackers to inject arbitrary web script or HTML via the redir parameter.

References

37833 vdb-entry
http://sla.ckers.org/forum/read.php?3%2C44%2C11482#msg-11482
webmod-auth-xss(37220) vdb-entry
27245 third-party-advisory
20071016 true: WebMod 0.48 XSS mailing-list
26087 vdb-entry