3 matches found
CVE-2014-4719
Cross-site scripting (XSS) vulnerability in the login panel (svn/login/) in User-Friendly SVN (aka USVN) before 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the username field.
CVE-2020-17364
USVN (aka User-friendly SVN) before 1.0.9 allows XSS via SVN logs.
CVE-2007-5945
USVN before 0.6.5 allows remote attackers to obtain a list of repository contents via unspecified vectors.