CVE-2020-25069

USVN aka User-friendly SVN before 1.0.10 allows attackers to execute arbitrary code in the commit view...

CVE-2020-25070

CVE-2020-25070 affects USVN (User-friendly SVN) prior to version 1.0.10. The issue is a cross-site request forgery (CSRF) flaw caused by the absence of the SameSite Strict cookie attribute. Impact is described as CSRF risk; no exploit details are provided in the sources. Remediation: upgrade to U...

CVE-2020-25070

USVN aka User-friendly SVN before 1.0.10 allows CSRF, related to the lack of the SameSite Strict feature...

CVE-2020-17364

USVN aka User-friendly SVN before 1.0.9 allows XSS via SVN logs...

CVE-2020-17364

USVN aka User-friendly SVN before 1.0.9 allows XSS via SVN logs...

CVE-2020-17364

CVE-2020-17364 affects USVN (User-friendly SVN) prior to 1.0.9. The issue is an XSS vulnerability that can be triggered via SVN logs, with CVSS v3.1 base score 6.1 (NETWORK, LOW attack complexity, NONE privileges, UI REQUIRED, scope CHANGED; confidentiality/integrity impact LOW, availability NONE...

CVE-2020-17364

USVN aka User-friendly SVN before 1.0.9 allows XSS via SVN logs...

Cross site scripting

Cross-site scripting vulnerability in User-friendly SVN USVN Version 1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0695

CVE-2018-0695 is a reflected cross-site scripting (CWE-79) vulnerability in User-friendly SVN (USVN) up to version 1.0.7 . The affected component is the web-based configuration interface for USVN, which allows an attacker to inject arbitrary web script or HTML. The impact described in the sources...

CVE-2018-0695

Cross-site scripting vulnerability in User-friendly SVN USVN Version 1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

User-friendly SVN vulnerable to cross-site scripting

Overview User-friendly SVN provided by USVN Team contains a reflected cross-site scripting vulnerability CWE-79. Jun Okutsu of NTT TechnoCross Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An...

Design/Logic Flaw

USVN before 0.6.5 allows remote attackers to obtain a list of repository contents via unspecified vectors...

CVE-2007-5945

USVN before 0.6.5 allows remote attackers to obtain a list of repository contents via unspecified vectors...

CVE-2007-5945

USVN before 0.6.5 allows remote attackers to obtain a list of repository contents via unspecified vectors...

CVE-2007-5945

CVE-2007-5945 affects USVN prior to 0.6.5. The vulnerability allows remote attackers to obtain a list of repository contents via unspecified vectors, impacting confidentiality (partial). The available documents do not specify root cause details or a remediation/fix. Exploit specifics, affected co...