← Database

CVE-2007-5477

MEDIUM CVSS: 4.3 Published: 2007-10-16 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in auth.w in djeyl.net WebMod 0.48 Half-Life Dedicated Server plugin allows remote attackers to inject arbitrary web script or HTML via the redir parameter.

Affected Platforms

Valve Software Webmod PluginValve Software Half-Life Dedicated Server

Weakness Type

CWE-79

References