Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in 1 revision.php, 2 log.php, 3 listing.php, and 4 comp.php in WebSVN allow context-dependent attackers to inject arbitrary web script or HTML via the name of a a file or b directory in a repository...

CVE-2016-1236

Multiple cross-site scripting XSS vulnerabilities in 1 revision.php, 2 log.php, 3 listing.php, and 4 comp.php in WebSVN allow context-dependent attackers to inject arbitrary web script or HTML via the name of a a file or b directory in a repository...

CVE-2016-1236: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in 1 revision.php, 2 log.php, 3 listing.php, and 4 comp.php in WebSVN allow context-dependent attackers to inject arbitrary web script or HTML via the name of a a file or b directory in a repository...

PT-2016-4661

Name of the Vulnerable Software and Affected Versions WebSVN affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities in various PHP files, including revision.php, log.php, listing.php, and comp.php. These vulnerabilities allow...

CVE-2011-5221

Cross-site scripting XSS vulnerability in the getLog function in svnlook.php in WebSVN before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to 1 comp.php, 2 diff.php, or 3 revision.php...

PT-2012-2198

Name of the Vulnerable Software and Affected Versions WebSVN versions prior to 2.3.1 Description A cross-site scripting XSS issue exists in the getLog function in svnlook.php, allowing remote attackers to inject arbitrary web script or HTML via the path parameter to API endpoints such as...

CVE-2011-5221: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the getLog function in svnlook.php in WebSVN before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to 1 comp.php, 2 diff.php, or 3 revision.php...

WebSVN 'path' 参数跨站脚本漏洞

Bugtraq ID: 51109 WebSVN是一个基于Web的Subversion Repository浏览器。 通过"path"参数传递给comp.php或revision.php脚本的输入在返回用户之前svnlook.php脚本中的"getLog"函数对此缺少过滤，可被利用进行跨站脚本攻击。 构建恶意URL，诱使用户解析，可获得敏感信息或劫持用户会话 0 WebSVN 2.3.2 WebSVN 2.1 WebSVN 2.0rc4 WebSVN 2.0 WebSVN 1.7 WebSVN 1.0 厂商解决方案 WebSVN 2.3.1及之后版本已经修复此漏洞，建议用户下载使用：...

FreePBX admin/cdr/call-comp.php 'dst' Parameter SQLi

The version of FreePBX installed on the remote host is affected by a SQL injection vulnerability involving the 'dst' parameter as used in the 'admin/cdr/call-comp.php' script. An unauthenticated, remote attacker can leverage this issue to launch a SQL injection attack against the affected...