WebSVN Directory Traversal Vulnerability

WebSVN is a tool for viewing source code repositories online. A directory traversal vulnerability exists in WebSVN 2.3.3, which allows an authenticated, remote user to read arbitrary files via a symbolic link attack in this commit...

CVE-2013-6892

WebSVN 2.3.3 allows remote authenticated users to read arbitrary files via a symlink attack in a commit...

Code injection

WebSVN 2.3.3 allows remote authenticated users to read arbitrary files via a symlink attack in a commit...

CVE-2013-6892

WebSVN 2.3.3 allows remote authenticated users to read arbitrary files via a symlink attack in a commit...

UBUNTU-CVE-2013-6892

WebSVN 2.3.3 allows remote authenticated users to read arbitrary files via a symlink attack in a commit...

CVE-2013-6892

CVE-2013-6892 affects WebSVN 2.3.3. Affected component is the websvn web viewer for Subversion repositories; the root cause is a symlink handling issue that allows a remote authenticated user to read arbitrary files by exploiting a symlink during commit/download. Practical impact: an attacker wit...

CVE-2013-6892

WebSVN 2.3.3 allows remote authenticated users to read arbitrary files via a symlink attack in a commit...

CVE-2013-6892

WebSVN 2.3.3 allows remote authenticated users to read arbitrary files via a symlink attack in a commit...

PT-2015-3571

Name of the Vulnerable Software and Affected Versions WebSVN version 2.3.3 Description The issue allows remote authenticated users to read arbitrary files via a symlink attack in a commit. Recommendations For WebSVN version 2.3.3, at the moment, there is no information about a newer version that...

CVE-2013-6892: Exposure of Sensitive Information to an Unauthorized Actor

WebSVN 2.3.3 allows remote authenticated users to read arbitrary files via a symlink attack in a commit...

websvn -- information disclosure

Thijs Kinkhorst reports: James Clawson reported: "Arbitrary files with a known path can be accessed in websvn by committing a symlink to a repository and then downloading the file using the download link. An attacker must have write access to the repo, and the download option must have been enabl...

websvn <= 2.0 (xss/fh/ce) Multiple Vulnerabilities

No description provided by source. WebSVN = 2.0 Multiple Vulnerabilities October 20, 2008 Vendor : Tim Armes URL : http://websvn.tigris.org Version : WebSVN = 2.0 Risk : Multiple Vulnerabilities Description: WebSVN is an online SVN repository viewer. The description taken from the project website...

WebSVN 2.3.2 Unproper Metacharacters Escaping exec() Remote Command Injection

No description provided by source. WebSVN 2.3.2 Unproper Metacharacters Escaping exec Remote Commands Injection Vulnerability tested against: Microsoft Windows Server R2 SP2 PHP 5.3.6 VC9 with magicquotesgpc = off default Apache 2.2.17 VC9 Introduction: This is a very special vulnerabilty, given...

CVE-2011-5221

Cross-site scripting XSS vulnerability in the getLog function in svnlook.php in WebSVN before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to 1 comp.php, 2 diff.php, or 3 revision.php...

CVE-2011-5221

Cross-site scripting XSS vulnerability in the getLog function in svnlook.php in WebSVN before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to 1 comp.php, 2 diff.php, or 3 revision.php...

CVE-2011-5221

CVE-2011-5221 affects WebSVN (before 2.3.1). The vulnerability is a cross-site scripting (XSS) in the getLog function of svnlook.php, allowing an attacker to inject arbitrary web script or HTML via the path parameter to comp.php, diff.php, or revision.php. Impact: client-side script execution in ...

CVE-2011-5221

Cross-site scripting XSS vulnerability in the getLog function in svnlook.php in WebSVN before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to 1 comp.php, 2 diff.php, or 3 revision.php...

CVE-2011-5221

Cross-site scripting XSS vulnerability in the getLog function in svnlook.php in WebSVN before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to 1 comp.php, 2 diff.php, or 3 revision.php...

PT-2012-2198

Name of the Vulnerable Software and Affected Versions WebSVN versions prior to 2.3.1 Description A cross-site scripting XSS issue exists in the getLog function in svnlook.php, allowing remote attackers to inject arbitrary web script or HTML via the path parameter to API endpoints such as...

CVE-2011-5221: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the getLog function in svnlook.php in WebSVN before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to 1 comp.php, 2 diff.php, or 3 revision.php...