EDB-15744

functional

gitWeb 1.7.3.3 - Cross-Site Scripting

view exploit source exploit_dbverifiedtype webappsauthor emgentpublished 2010-12-15catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2010-3906USmedium4.3Exploit
Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) f and (2) fp parameters.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan