CVEvulnerability
CVE-2011-5221
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-10-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the getLog function in svnlook.php in WebSVN before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to (1) comp.php, (2) diff.php, or (3) revision.php.
Affected configurations
• websvn websvn (<= 2.3.0)
• websvn websvn 1.61
• websvn websvn 2.0
• websvn websvn 2.1.0
• websvn websvn 2.2.0
• websvn websvn 2.2.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/77941 osvdb.org
- http://osvdb.org/77942 osvdb.org
- http://osvdb.org/77943 osvdb.org
- http://secunia.com/advisories/47288 Vendor Advisory
- http://st2tea.blogspot.com/2011/12/websvn-cross-site-scripting.html Exploit
- http://websvn.tigris.org/issues/show_bug.cgi?id=275 websvn.tigris.org
- http://www.securityfocus.com/bid/51109 www.securityfocus.com
- http://www.securitytracker.com/id?1026438 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71888 exchange.xforce.ibmcloud.com
- http://osvdb.org/77941 osvdb.org
- http://osvdb.org/77942 osvdb.org
- http://osvdb.org/77943 osvdb.org
- http://secunia.com/advisories/47288 Vendor Advisory
- http://st2tea.blogspot.com/2011/12/websvn-cross-site-scripting.html Exploit
- http://websvn.tigris.org/issues/show_bug.cgi?id=275 websvn.tigris.org
- http://www.securityfocus.com/bid/51109 www.securityfocus.com
- http://www.securitytracker.com/id?1026438 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71888 exchange.xforce.ibmcloud.com