Websvn

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Websvn records in CISA KEV

No Websvn vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Websvn 7 records HIGH

Records

7 records

TI-2021-12114 CVE-2021-32305 · GHSA-rqp6-mfj6-v759

WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell…

HIGH 84

WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.87304 Published 2021-05-18 No fix listed CWE-78

TI-2011-01917 CVE-2011-2195 · GHSA-q3rm-gwvh-vhv3

OS command injection in websvn

MEDIUM 47

A flaw was found in WebSVN 2.3.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02664 Published 2021-10-26 No fix listed CWE-78

TI-2016-02263 CVE-2016-2511 · GHSA-8rm3-w6q8-4976

Cross-site scripting (XSS) vulnerability in WebSVN 2.3.3 and earlier allows remote…

LOW 31

Cross-site scripting (XSS) vulnerability in WebSVN 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the path parameter to log.php.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01711 Published 2016-04-07 No fix listed CWE-79

TI-2016-01134 CVE-2016-1236 · GHSA-3h36-r422-7q35

Multiple cross-site scripting (XSS) vulnerabilities in (1) revision.php, (2) log.php, (3)…

LOW 29

Multiple cross-site scripting (XSS) vulnerabilities in (1) revision.php, (2) log.php, (3) listing.php, and (4) comp.php in WebSVN allow context-dependent attackers to inject arbitrary web script or HTML via the name of a…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00857 Published 2016-05-11 No fix listed CWE-79

TI-2011-04498 CVE-2011-5221 · GHSA-7wh8-gg39-jghh

Cross-site scripting (XSS) vulnerability in the getLog function in svnlook.php in WebSVN…

LOW 25

Cross-site scripting (XSS) vulnerability in the getLog function in svnlook.php in WebSVN before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to (1) comp.php, (2) diff.php, o…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0249 Published 2012-10-25 No fix listed CWE-79

TI-2007-02955 CVE-2007-3056 · GHSA-p5c6-4h74-5798

Cross-site scripting (XSS) vulnerability in filedetails.php in WebSVN 2.0rc4, and…

LOW 23

Cross-site scripting (XSS) vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the path parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01562 Published 2007-06-06 No fix listed CWE-79

TI-2013-05665 CVE-2013-6892 · GHSA-7522-h8jg-5f7w

WebSVN 2.3.3 allows remote authenticated users to read arbitrary files via a symlink attack in a commit.

LOW 19

WebSVN 2.3.3 allows remote authenticated users to read arbitrary files via a symlink attack in a commit.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00956 Published 2015-01-21 No fix listed CWE-200

Open these records in search →

Critical	2
High	0
Medium	4
Low	1
No CVSS	0