CVE-2016-2511

概要

参考情報

• lists.fedoraproject.org/pipermail/package-announce/2016-March/179168.html
• packetstormsecurity.com/files/135886/WebSVN-2.3.3-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2016/Feb/99 · Exploit
• debian.org/security/2016/dsa-3490

websvn のその他の脆弱性

• CVE-2011-2195緊急 9.8A flaw was found in WebSVN 2.3.2. Without prior authentication, if the 'allowDownload' option is enabled in config.php, an attacker can invo…
• CVE-2021-32305緊急 9.8WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter.
• CVE-2013-6892低 3.5WebSVN 2.3.3 allows remote authenticated users to read arbitrary files via a symlink attack in a commit.
• CVE-2011-5221中 4.3Cross-site scripting (XSS) vulnerability in the getLog function in svnlook.php in WebSVN before 2.3.1 allows remote attackers to inject arbi…
• CVE-2007-3056中 4.3Cross-site scripting (XSS) vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly earlier, allows remote attackers to inject arbitr…