CVE-2007-2808

Vulnerability

The gnatsweb.pl script in Gnatsweb 4.00 and Gnats 4.1.99 contains a cross-site scripting (XSS) vulnerability. The database parameter is not properly sanitized before being returned to the user, allowing injection of arbitrary web script or HTML. [1]

Exploitation

An attacker can exploit this vulnerability by sending a crafted HTTP request to the vulnerable gnatsweb.pl script with malicious JavaScript or HTML in the database parameter. No authentication or special privileges are required; the attack is remote. [1]

Impact

Successful exploitation allows the attacker to execute arbitrary HTML and script code in the victim's browser session within the context of the affected site. This can lead to session hijacking, defacement, or theft of sensitive information. [1]

Mitigation

No official patch has been released. The recommended workaround is to manually edit the source code of gnatsweb.pl to properly sanitize the database parameter before output. [1]