PT-2011-1048 · Viewvc · Viewvc

Name of the Vulnerable Software and Affected Versions: ViewVC versions 1.0.x through 1.0.12 ViewVC versions 1.1.x through 1.1.15 Description: The issue allows remote authenticated users with repository commit access to inject arbitrary web script or HTML. This can be achieved via the function nam...