CVE-2013-2294

CVE-2013-2294 concerns ViewGit, with XSS vulnerabilities in the web UI prior to 0.0.7. The issues are triggered when a remote repository user injects malicious data via git branch or tag names, affecting the Shortlog table in templates/shortlog.php and the Heads table in plates/summary.php. The v...

ViewGit 0.0.6 - Multiple Cross-Site Scripting Vulnerabilities

ViewGit 0.0.6 - Multiple Cross-Site Scripting Vulnerabilities Vulnerability Report Author: Matthew R. Bucci Date: 18 March, 2013 CVE-2013-2294 Description of Vulnerability: ----------------------------- ViewGit "is a git web repository viewer that aims to be easy to set up and upgrade, light on...