203 matches found
CVE-2016-2511
Cross-site scripting XSS vulnerability in WebSVN 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the path parameter to log.php...
CVE-2016-2511
Cross-site scripting XSS vulnerability in WebSVN 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the path parameter to log.php...
CVE-2016-2511: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in WebSVN 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the path parameter to log.php...
[SECURITY] Fedora 23 Update: websvn-2.3.3-12.fc23
WebSVN offers a view onto your subversion repositories that's been designed to reflect the Subversion methodology. You can view the log of any file or directory and see a list of all the files changed, added or deleted in any given revision. You can also view the differences between two versions ...
Fedora 22 : websvn-2.3.3-12.fc22 (2016-11537160e9)
Fix CVE-2016-2511 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...
Fedora 23 : websvn-2.3.3-12.fc23 (2016-657a1305aa)
Fix CVE-2016-2511 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...
Fedora Update for websvn FEDORA-2016-657
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for websvn FEDORA-2016-11537160
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 22 Update: websvn-2.3.3-12.fc22
WebSVN offers a view onto your subversion repositories that's been designed to reflect the Subversion methodology. You can view the log of any file or directory and see a list of all the files changed, added or deleted in any given revision. You can also view the differences between two versions ...
Debian Security Advisory DSA 3490-1 (websvn - security update)
Jakub Palaczynski discovered that websvn, a web viewer for Subversion repositories, does not correctly sanitize user-supplied input, which allows a remote user to run reflected cross-site scripting attacks. OpenVAS Vulnerability Test $Id: deb3490.nasl 6608 2017-07-07 12:05:05Z cfischer $...
Debian: Security Advisory (DSA-3490-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD : websvn -- reflected XSS (12d1b5a6-e39d-11e5-9f77-5453ed2e2b49)
Sebastien Delafond reports : Jakub Palaczynski discovered that websvn, a web viewer for Subversion repositories, does not correctly sanitize user-supplied input, which allows a remote user to run reflected cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
FreeBSD : websvn -- information disclosure (f69e1f09-e39b-11e5-9f77-5453ed2e2b49)
Thijs Kinkhorst reports : James Clawson reported : 'Arbitrary files with a known path can be accessed in websvn by committing a symlink to a repository and then downloading the file using the download link. An attacker must have write access to the repo, and the download option must have been...
WebSVN 2.3.3 log.php文件path参数 跨站脚本漏洞
No description provided by source...
WebSVN <= 2.3.3 XSS Vulnerability
WebSVN is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tigris:websvn";...
Websvn Cross-Site Scripting Vulnerability
WebSVN is a set of web-based Subversion Repository browsers that allow you to view logs of files or folders, see a list of changes to files, add or remove arbitrary version numbers, and more. A cross-site scripting vulnerability exists in WebSVN, which allows remote attackers to exploit the...
Debian DSA-3490-1 : websvn - security update
Jakub Palaczynski discovered that websvn, a web viewer for Subversion repositories, does not correctly sanitize user-supplied input, which allows a remote user to run reflected cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...
Debian DLA-428-1 : websvn security update
It was discovered that there was a cross-site scripting vulnerability in websvn, a web-based Subversion repository browser For Debian 6 Squeeze, this issue has been fixed in websvn version 2.3.1-1+deb6u2. NOTE: Tenable Network Security has extracted the preceding description block directly from t...
[SECURITY] [DSA 3490-1] websvn security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3490-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 23, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3490-1] websvn security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3490-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 23, 2016 https://www.debian.org/security/faq -...