CVE-2007-5477: Valve Software Half-Life Dedicated Server

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in auth.w in djeyl.net WebMod 0.48 Half-Life Dedicated Server plugin allows remote attackers to inject arbitrary web script or HTML via the redir parameter.

Affected products

• Valve Software Half-Life Dedicated Server: any version
• Valve Software Webmod Plugin: version 0.48 only

Published 2007-10-16. Last modified 2026-06-16.