CVE-2004-1062

Multiple cross-site scripting XSS vulnerabilities in ViewCVS 0.9.2 allow remote attackers to inject arbitrary HTML and web script via certain error messages...

ViewCVS < 1.0.0 HTTP Response Splitting

Binary data 2478.prm...

ViewCVS < 1.0.0 Multiple Vulnerabilities

The remote host is running ViewCVS, a tool to browse CVS repositories over the web written in python. Flaws in the remote version of this website may allow an attacker to launch cross-site scripting and/or HTTP response-splitting attacks against the remote install. %NASLMINLEVEL 70300 C Tenable...

ViewCVS: Information leak and XSS vulnerabilities

Background ViewCVS is a browser interface for viewing CVS and Subversion version control repositories through a web browser. Description The tar export functions in ViewCVS bypass the 'hidecvsroot' and 'forbidden' settings and therefore expose information that should be kept secret CAN-2004-0915...

GLSA-200412-26 : ViewCVS: Information leak and XSS vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200412-26 ViewCVS: Information leak and XSS vulnerabilities The tar export functions in ViewCVS bypass the 'hidecvsroot' and 'forbidden' settings and therefore expose information that should be kept secret CAN-2004-0915...

CVE-2004-0915

CVE-2004-0915 concerns viewcvs: when exporting a repository as a tar archive, the hide_cvsroot and forbidden settings are not properly enforced, enabling potential information leakage. The issue affects viewcvs versions prior to 0.9.2 and is documented across multiple sources (e.g., NVD entry and...

CVE-2004-0915

Multiple unknown vulnerabilities in viewcvs before 0.9.2, when exporting a repository as a tar archive, does not properly implement the hidecvsroot and forbidden settings, which could allow remote attackers to gain sensitive information...

[SECURITY] [DSA 605-1] New viewcvs packages fix information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 605-1 [email protected] http://www.debian.org/security/ Martin Schulze December 6th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 605-1] New viewcvs packages fix information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 605-1 [email protected] http://www.debian.org/security/ Martin Schulze December 6th, 2004 http://www.debian.org/security/faq -...

[Full-Disclosure] [SECURITY] [DSA 605-1] New viewcvs packages fix information leak

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 605-1 [email protected] http://www.debian.org/security/ Martin Schulze December 6th, 2004 http://www.debian.org/security/faq -...

DSA-605-1 viewcvs - settings not honored

Bulletin has no description...

ViewCVS < 1.0-dev Multiple Unspecified Vulnerabilities

Binary data 2446.prm...

Debian DSA-605-1 : viewcvs - settings not honored

Haris Sehic discovered several vulnerabilities in viewcvs, a utility for viewing CVS and Subversion repositories via HTTP. When exporting a repository as a tar archive the hidecvsroot and forbidden settings were not honoured enough. When upgrading the package for woody, please make a copy of your...

viewcvs -- information leakage

The hidecvsroot and forbidden configuration options are not properly honored by viewcvs when exporting to a tar file which can lead to information leakage...

ViewCVS viewcvs.cgi Multiple Parameter XSS

The remote host is running ViewCVS, a tool written in Python to browse CVS repositories via the web. The version of ViewCVS running on the remote host has a cross-site scripting vulnerability. Input to the 'viewcvs' parameter is not properly sanitized. A remote attacker could exploit this by...

CVE-2002-0771

Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal cookies via the 1 cvsroot or 2 sortby parameters...

CVE-2002-0771

Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal cookies via the 1 cvsroot or 2 sortby parameters...

CVE-2002-0771

CVE-2002-0771 is a cross-site scripting vulnerability in ViewCVS 0.9.2’s viewcvs.cgi. The flaw arises from insufficient sanitization of input parameters (cvsroot and sortby), allowing a remote attacker to inject script and potentially steal cookies when a user visits a malicious URL. Affected pro...

ViewCVS 0.9.2 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/4818/info ViewCVS does not filter HTML tags from certain URL parameters, making it prone to cross-site scripting attacks. An attacker may exploit this by constructing a malicious link with script code to a site running ViewCVS and sending it to a legitima...

ViewCVS 0.9.2 - Cross-Site Scripting

ViewCVS 0.9.2 - Cross-Site Scripting source: https://www.securityfocus.com/bid/4818/info ViewCVS does not filter HTML tags from certain URL parameters, making it prone to cross-site scripting attacks. An attacker may exploit this by constructing a malicious link with script code to a site running...