Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
383
VMScore

CVE-2016-1236

Published: 11/05/2016 Updated: 16/05/2016
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Subscribe to Websvn

Vulnerability Summary

Multiple cross-site scripting (XSS) vulnerabilities in (1) revision.php, (2) log.php, (3) listing.php, and (4) comp.php in WebSVN allow context-dependent malicious users to inject arbitrary web script or HTML via the name of a (a) file or (b) directory in a repository.

Vulnerable Product Search on Vulmon Subscribe to Product

websvn websvn

debian debian linux 8.0

Vendor Advisories

Debian Security Advisories: DSA-3572-1 websvn -- security update
Nitin Venkatesh discovered that websvn, a web viewer for Subversion repositories, is susceptible to cross-site scripting attacks via specially crafted file and directory names in repositories For the stable distribution (jessie), this problem has been fixed in version 233-12+deb8u2 We recommend that you upgrade your websvn packages ...

References

CWE-79http://www.debian.org/security/2016/dsa-3572http://www.openwall.com/lists/oss-security/2016/05/05/22https://bugzilla.redhat.com/show_bug.cgi?id=1333673https://nvd.nist.govhttps://www.debian.org/security/./dsa-3572
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-21991CVE-2024-32674path traversalCVE-2023-21987denial of servicedosCVE-2024-4647CVE-2024-25519CVE-2024-33612
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook