CVE-2007-5588

Publication date 19 October 2007

Last updated 24 July 2024


Ubuntu priority

Cross-site scripting (XSS) vulnerability in mnoGoSearch before 3.2.43 allows remote attackers to inject arbitrary web script or HTML via the t parameter in search.cgi, as reachable from search.htm-dist.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
mnogosearch 9.10 karmic
Fixed 3.3.4-4.1
9.04 jaunty
Fixed 3.3.4-4.1
8.10 intrepid
Fixed 3.3.4-4.1
8.04 LTS hardy
Fixed 3.3.4-4.1
7.10 gutsy Ignored end of life, was needed
7.04 feisty Ignored end of life, was needed
6.10 edgy Ignored end of life, was needed
6.06 LTS dapper Ignored end of life