CVE-2011-5221 Cross-site scripting (XSS) vulnerability in the getLog function in svnlook.php in WebSVN before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to (1) comp....
MediumCVSS 4.3
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the getLog function in svnlook.php in WebSVN before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to (1) comp.php, (2) diff.php, or (3) revision.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| websvn | <= 2.3.0 | No fix listed |
| websvn | = 1.61 | No fix listed |
| websvn | = 2.0 | No fix listed |
| websvn | = 2.1.0 | No fix listed |
| websvn | = 2.2.0 | No fix listed |
| websvn | = 2.2.1 | No fix listed |
References
- 77941 vdb-entry
- 77942 vdb-entry
- 77943 vdb-entry
- 47288 third-party-advisory vendor-advisory
- st2tea.blogspot.com exploit
- websvn.tigris.org
- 51109 vdb-entry
- 1026438 vdb-entry
- websvn-path-xss(71888) vdb-entry