PT-2014-6072

Name of the Vulnerable Software and Affected Versions User-Friendly SVN versions prior to 1.0.7 Description The issue is related to a cross-site scripting XSS vulnerability in the login panel, specifically at the 'svn/login/' endpoint. This vulnerability allows remote attackers to inject arbitrar...

CVE-2014-4719: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the login panel svn/login/ in User-Friendly SVN aka USVN before 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the username field...