Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown

CVE-2012-3356

Disclosure Date: July 22, 2012 (last updated October 04, 2023)
The remote SVN views functionality (lib/vclib/svn/svn_ra.py) in ViewVC before 1.1.15 does not properly perform authorization, which allows remote attackers to bypass intended access restrictions via unspecified vectors.
0
0
Attacker Value
Unknown

CVE-2012-3357

Disclosure Date: July 22, 2012 (last updated October 04, 2023)
The SVN revision view (lib/vclib/svn/svn_repos.py) in ViewVC before 1.1.15 does not properly handle log messages when a readable path is copied from an unreadable path, which allows remote attackers to obtain sensitive information, related to a "log msg leak."
0
0
Attacker Value
Unknown

CVE-2009-5024

Disclosure Date: May 23, 2011 (last updated October 04, 2023)
ViewVC before 1.1.11 allows remote attackers to bypass the cvsdb row_limit configuration setting, and consequently conduct resource-consumption attacks, via the limit parameter, as demonstrated by a "query revision history" request.
0
0
Attacker Value
Unknown

CVE-2010-0132

Disclosure Date: March 31, 2010 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in ViewVC 1.1 before 1.1.5 and 1.0 before 1.0.11, when the regular expression search functionality is enabled, allows remote attackers to inject arbitrary web script or HTML via vectors related to "search_re input," a different vulnerability than CVE-2010-0736.
0
0
Attacker Value
Unknown

CVE-2010-0736

Disclosure Date: March 19, 2010 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the view_queryform function in lib/viewvc.py in ViewVC before 1.0.10, and 1.1.x before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via "user-provided input."
0
0