CVE-2002-0771

Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal cookies via the 1 cvsroot or 2 sortby parameters...

CVE-2002-0771

CVE-2002-0771 is a cross-site scripting vulnerability in ViewCVS 0.9.2’s viewcvs.cgi. The flaw arises from insufficient sanitization of input parameters (cvsroot and sortby), allowing a remote attacker to inject script and potentially steal cookies when a user visits a malicious URL. Affected pro...