TI-2011-01917 CVE-2011-2195 · GHSA-q3rm-gwvh-vhv3
OS command injection in websvn
Priority MEDIUM 47
A flaw was found in WebSVN 2.3.2.
Vulnerabilities
7 records
TI-2021-12114 CVE-2021-32305 · GHSA-rqp6-mfj6-v759
WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell…
Priority HIGH 84
WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter.
TI-2016-01134 CVE-2016-1236 · GHSA-3h36-r422-7q35
Multiple cross-site scripting (XSS) vulnerabilities in (1) revision.php, (2) log.php, (3)…
Priority LOW 29
Multiple cross-site scripting (XSS) vulnerabilities in (1) revision.php, (2) log.php, (3) listing.php, and (4) comp.php in WebSVN allow context-dependent attackers to inject arbitrary web script or HTML via the name of a…
TI-2016-02263 CVE-2016-2511 · GHSA-8rm3-w6q8-4976
Cross-site scripting (XSS) vulnerability in WebSVN 2.3.3 and earlier allows remote…
Priority LOW 31
Cross-site scripting (XSS) vulnerability in WebSVN 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the path parameter to log.php.
TI-2013-05665 CVE-2013-6892 · GHSA-7522-h8jg-5f7w
WebSVN 2.3.3 allows remote authenticated users to read arbitrary files via a symlink attack in a commit.
Priority LOW 19
WebSVN 2.3.3 allows remote authenticated users to read arbitrary files via a symlink attack in a commit.
TI-2011-04498 CVE-2011-5221 · GHSA-7wh8-gg39-jghh
Cross-site scripting (XSS) vulnerability in the getLog function in svnlook.php in WebSVN…
Priority LOW 25
Cross-site scripting (XSS) vulnerability in the getLog function in svnlook.php in WebSVN before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to (1) comp.php, (2) diff.php, o…
TI-2007-02955 CVE-2007-3056 · GHSA-p5c6-4h74-5798
Cross-site scripting (XSS) vulnerability in filedetails.php in WebSVN 2.0rc4, and…
Priority LOW 23
Cross-site scripting (XSS) vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the path parameter.