CVE:CVE-2007-5477
CNNVD:CNNVD-200710-301
djeyl.net WebMod 0.48 Half-Life Dedicated 服务器插件程序的auth.w中存在跨站脚本攻击漏洞。远程攻击者可以借助redir参数，注入任意web脚本或HTML。
solution:Upgrade valve_software half-life_dedicated_server to a higher version than *; Upgrade valve_software webmod_plugin to a higher version than 0.48,and avoid the version 0.48