CVE-2007-6110
Fixed in a distro release EPSS 4%
Cross-site scripting (XSS) vulnerability in htsearch in htdig 3.2.0b6 allows remote attackers to inject arbitrary web script or HTML via the sort parameter.
Products: htdig
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | htdig | 1:3.2.0b6-4 |
| Debian 13 | htdig | 1:3.2.0b6-4 |
| Debian 14 | htdig | 1:3.2.0b6-4 |
| Debian 4.0 | htdig | 1:3.2.0b6-3.1etch1 |
| Red Hat Enterprise Linux 4 | htdig | 3:3.2.0b6-4.el4_6 |
| Red Hat Enterprise Linux 4 | htdig-debuginfo | 3:3.2.0b6-4.el4_6 |
| Red Hat Enterprise Linux 4 | htdig-web | 3:3.2.0b6-4.el4_6 |
| Red Hat Enterprise Linux 5 | htdig | 3:3.2.0b6-9.0.1.el5_1 |
| Red Hat Enterprise Linux 5 | htdig-debuginfo | 3:3.2.0b6-9.0.1.el5_1 |
| Red Hat Enterprise Linux 5 | htdig-web | 3:3.2.0b6-9.0.1.el5_1 |