CVE-2011-5221

Cross-site scripting (XSS) vulnerability in the getLog function in svnlook.php in WebSVN before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to (1) comp.php, (2) diff.php, or (3) revision.php.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:websvn:websvn:*:*:*:*:*:*:*:*
cpe:2.3:a:websvn:websvn:1.61:*:*:*:*:*:*:*
cpe:2.3:a:websvn:websvn:2.0:*:*:*:*:*:*:*
cpe:2.3:a:websvn:websvn:2.1.0:*:*:*:*:*:*:*
cpe:2.3:a:websvn:websvn:2.2.0:*:*:*:*:*:*:*
cpe:2.3:a:websvn:websvn:2.2.1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2012-10-25 17:55

Updated : 2024-02-04 18:16


NVD link : CVE-2011-5221

Mitre link : CVE-2011-5221

CVE.ORG link : CVE-2011-5221


JSON object : View

Products Affected

websvn

  • websvn
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')