← back
CVE-2007-6700

CVE-2007-6700

EPSS 1.7%
Cross-site scripting (XSS) vulnerability in cgi-bin/bgplg in the web interface for the BGPD daemon in OpenBSD 4.1 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/31081unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/28726http://www.mail-archive.com/misc%40openbsd.org/msg49057.htmlhttp://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/bgplg/bgplg.chttp://www.securityfocus.com/archive/1/487350/100/0/threadedhttp://www.securityfocus.com/archive/1/487369/100/0/threadedhttp://www.securityfocus.com/bid/27535http://www.securitytracker.com/id?1019288