CVE-2007-5477

Description

Cross-site scripting (XSS) vulnerability in auth.w in djeyl.net WebMod 0.48 Half-Life Dedicated Server plugin allows remote attackers to inject arbitrary web script or HTML via the redir parameter.

Affected products

• Valve Software / half-life_dedicated_server
• Valve Software / webmod_plugin0.48 – 0.48

References

• MISChttp://osvdb.org/37833
• MISChttp://sla.ckers.org/forum/read.php?3%2C44%2C11482#msg-11482
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/37220
• VENDOR_ADVISORYhttp://secunia.com/advisories/27245
• MISChttp://www.attrition.org/pipermail/vim/2007-October/001833.html
• MISChttp://www.securityfocus.com/bid/26087