CVE-2007-3056 Cross-site scripting (XSS) vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the path parameter.
MediumCVSS 4.3
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the path parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| websvn | <= 2.0rc4 | No fix listed |
References
- bugs.gentoo.org
- 36409 vdb-entry
- 25532 third-party-advisory vendor-advisory
- 1018601 vdb-entry
- websvn.tigris.org
- 20070823 ACK for CVE-2007-3056 (WebSVN) mailing-list
- www.nabble.com
- 24310 vdb-entry
- websvn-filedetails-xss(34726) vdb-entry