Unscored severity · published Nov 23, 2007
CVE-2007-6110
Cross-site scripting (XSS) vulnerability in htsearch in htdig 3.2.0b6 allows remote attackers to inject arbitrary web script or HTML via the sort parameter
–
CVSS
4.4%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in htsearch in htdig 3.2.0b6 allows remote attackers to inject arbitrary web script or HTML via the sort parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.4% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HT
Htdig · Htdig
3.2.0b6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-6110
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-6110
bugs.debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=453278
Vendor Advisory
http://secunia.com/advisories/27850
Vendor Advisory
http://secunia.com/advisories/27890
Vendor Advisory
http://secunia.com/advisories/27965
Vendor Advisory
http://secunia.com/advisories/28062
securitytracker.com
http://securitytracker.com/id?1019010
More from Htdig
–
CVE-2005-0085
Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not…
–
CVE-2002-2010
Cross-site scripting (XSS) vulnerability in htsearch.cgi in htdig (ht://Dig) 3.1.5, 3.1.6, and 3.2 allows remote attackers to inject arbitrary web script or HTML via the words…
–
CVE-2001-0834
htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to (1)…
–
CVE-2000-0208
The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch