CVE-2007-3056 - Cross-site scripting (XSS) vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the path parameter

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the path parameter

Published Jun 6, 2007

4.3

MEDIUM

CVSS 2.0

EPSS 1.56%

Description

Cross-site scripting (XSS) vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the path parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (10)

http://bugs.gentoo.org/show_bug.cgi?id=180879
x_refsource_MISC
http://osvdb.org/36409
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/25532
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securitytracker.com/id?1018601
vdb-entryx_refsource_SECTRACK
http://websvn.tigris.org/servlets/ReadMsg?list=dev&msgNo=1328
x_refsource_CONFIRM
http://www.attrition.org/pipermail/vim/2007-August/001771.html
mailing-listx_refsource_VIM
http://www.nabble.com/CVE-2007-3056-tf4246678.html
x_refsource_CONFIRM
http://www.securityfocus.com/bid/24310
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2007-3048
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/34726
vdb-entryx_refsource_XF

Link	Providers	Tags
http://bugs.gentoo.org/show_bug.cgi?id=180879		x_refsource_MISC
http://osvdb.org/36409		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/25532		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securitytracker.com/id?1018601		vdb-entryx_refsource_SECTRACK
http://websvn.tigris.org/servlets/ReadMsg?list=dev&msgNo=1328		x_refsource_CONFIRM
http://www.attrition.org/pipermail/vim/2007-August/001771.html		mailing-listx_refsource_VIM
http://www.nabble.com/CVE-2007-3056-tf4246678.html		x_refsource_CONFIRM
http://www.securityfocus.com/bid/24310		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2007-3048		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/34726		vdb-entryx_refsource_XF