CVE-2011-5221

概要

参考情報

• osvdb.org/77941
• osvdb.org/77942
• osvdb.org/77943
• secunia.com/advisories/47288 · Vendor Advisory
• st2tea.blogspot.com/2011/12/websvn-cross-site-scripting.html · Exploit
• websvn.tigris.org/issues/show_bug.cgi
• securityfocus.com/bid/51109
• securitytracker.com/id
• exchange.xforce.ibmcloud.com/vulnerabilities/71888

websvn のその他の脆弱性

• CVE-2011-2195緊急 9.8A flaw was found in WebSVN 2.3.2. Without prior authentication, if the 'allowDownload' option is enabled in config.php, an attacker can invo…
• CVE-2021-32305緊急 9.8WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter.
• CVE-2016-2511中 6.1Cross-site scripting (XSS) vulnerability in WebSVN 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the …
• CVE-2013-6892低 3.5WebSVN 2.3.3 allows remote authenticated users to read arbitrary files via a symlink attack in a commit.
• CVE-2007-3056中 4.3Cross-site scripting (XSS) vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly earlier, allows remote attackers to inject arbitr…