CVE-2016-1236

CVE-2016-1236 affects WebSVN by multiple XSS vulnerabilities in revision.php, log.php, listing.php, and comp.php. The context-dependent attacker can inject arbitrary script/HTML via the name field of a repository file or directory, leading to potential user exploitation. Reported CVSS: 4.3 (CVSS2...

CVE-2016-1236

Multiple cross-site scripting XSS vulnerabilities in 1 revision.php, 2 log.php, 3 listing.php, and 4 comp.php in WebSVN allow context-dependent attackers to inject arbitrary web script or HTML via the name of a a file or b directory in a repository...

Debian DSA-3572-1 : websvn - security update

Nitin Venkatesh discovered that websvn, a web viewer for Subversion repositories, is susceptible to cross-site scripting attacks via specially crafted file and directory names in repositories. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

CVE-2016-1236: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in 1 revision.php, 2 log.php, 3 listing.php, and 4 comp.php in WebSVN allow context-dependent attackers to inject arbitrary web script or HTML via the name of a a file or b directory in a repository...

Debian DLA-462-1 : websvn security update

Nitin Venkatesh discovered that websvn, a web viewer for Subversion repositories, is susceptible to cross-site scripting attacks via specially crafted file and directory names in repositories. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA...

[SECURITY] [DLA 462-1] websvn security update

Package : websvn Version : 2.3.3-1.1+deb7u3 CVE ID : CVE-2016-1236 Nitin Venkatesh discovered that websvn, a web viewer for Subversion repositories, is susceptible to cross-site scripting attacks via specially crafted file and directory names in repositories...

[SECURITY] [DSA 3572-1] websvn security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3572-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 09, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3572-1] websvn security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3572-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 09, 2016 https://www.debian.org/security/faq -...

DSA-3572-1 websvn - security update

Bulletin has no description...

DLA-462-1 websvn - security update

Bulletin has no description...

Debian Security Advisory DSA 3572-1 (websvn - security update)

Nitin Venkatesh discovered that websvn, a web viewer for Subversion repositories, is susceptible to cross-site scripting attacks via specially crafted file and directory names in repositories. OpenVAS Vulnerability Test $Id: deb3572.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from...

PT-2016-4661

Name of the Vulnerable Software and Affected Versions WebSVN affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities in various PHP files, including revision.php, log.php, listing.php, and comp.php. These vulnerabilities allow...

Debian: Security Advisory (DSA-3572-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WebSVN cross-site scripting vulnerability (CNVD-2016-02878)

WebSVN is a set of Web-based Subversion Repository browser. A cross-site scripting vulnerability in WebSVN's handling of directory names or filenames allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or...

CVE-2016-2511

Cross-site scripting XSS vulnerability in WebSVN 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the path parameter to log.php...

CVE-2016-2511

Cross-site scripting XSS vulnerability in WebSVN 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the path parameter to log.php...

UBUNTU-CVE-2016-2511

Cross-site scripting XSS vulnerability in WebSVN 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the path parameter to log.php...

CVE-2016-2511

Cross-site scripting XSS vulnerability in WebSVN 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the path parameter to log.php...

Cross site scripting

Cross-site scripting XSS vulnerability in WebSVN 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the path parameter to log.php...

CVE-2016-2511

CVE-2016-2511 is a cross-site scripting (XSS) vulnerability affecting WebSVN 2.3.3 and earlier, exploitable via the path parameter to log.php. Public documents corroborate affected versions and provide concrete fixes in vendor advisories: Fedora updates (e.g., FEDORA-2016-657 and FEDORA-2016-1153...