CVE-2002-0771

Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal cookies via the 1 cvsroot or 2 sortby parameters...

CVE-2002-0771

CVE-2002-0771 is a cross-site scripting vulnerability in ViewCVS 0.9.2’s viewcvs.cgi. The flaw arises from insufficient sanitization of input parameters (cvsroot and sortby), allowing a remote attacker to inject script and potentially steal cookies when a user visits a malicious URL. Affected pro...

CVE-2002-0771: Undefined Security Weakness

Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal cookies via the 1 cvsroot or 2 sortby parameters...

ViewCVS 0.9.2 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/4818/info ViewCVS does not filter HTML tags from certain URL parameters, making it prone to cross-site scripting attacks. An attacker may exploit this by constructing a malicious link with script code to a site running ViewCVS and sending it to a legitima...

ViewCVS 0.9.2 - Cross-Site Scripting

ViewCVS 0.9.2 - Cross-Site Scripting source: https://www.securityfocus.com/bid/4818/info ViewCVS does not filter HTML tags from certain URL parameters, making it prone to cross-site scripting attacks. An attacker may exploit this by constructing a malicious link with script code to a site running...