CVE-2010-0736

The CVE-2010-0736 issue affects ViewVC where the view_queryform function in lib/viewvc.py is vulnerable to XSS via user-provided input. Affected ranges are ViewVC prior to 1.0.10 and 1.1.x prior to 1.1.4. The vulnerability allows remote attackers to inject arbitrary script/HTML and is confirmed a...

CVE-2008-4325

CVE-2008-4325 affects ViewVC 1.0.5 (lib/viewvc.py) where the Content-Type header in the HTTP response is derived from the request’s content-type parameter, allowing a mismatch that could cause browsers to misinterpret content. The issue is contingent on attacker access to the viewed repository. P...