Filtered by vendor Viewcvs Subscriptions
Filtered by product Viewcvs Subscriptions
Total 5 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2005-4831 1 Viewcvs 1 Viewcvs 2024-11-21 N/A
viewcvs in ViewCVS 0.9.2 allows remote attackers to set the Content-Type header to arbitrary values via the content-type parameter, which can be leveraged for cross-site scripting (XSS) and other attacks, as demonstrated using (1) "text/html", or (2) "image/jpeg" with an image that is rendered as HTML by Internet Explorer, a different vulnerability than CVE-2004-1062. NOTE: it was later reported that 0.9.4 is also affected.
CVE-2005-4830 1 Viewcvs 1 Viewcvs 2024-11-21 N/A
CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the content-type parameter.
CVE-2004-1062 1 Viewcvs 1 Viewcvs 2024-11-20 N/A
Multiple cross-site scripting (XSS) vulnerabilities in ViewCVS 0.9.2 allow remote attackers to inject arbitrary HTML and web script via certain error messages.
CVE-2004-0915 2 Debian, Viewcvs 2 Debian Linux, Viewcvs 2024-11-20 N/A
Multiple unknown vulnerabilities in viewcvs before 0.9.2, when exporting a repository as a tar archive, does not properly implement the hide_cvsroot and forbidden settings, which could allow remote attackers to gain sensitive information.
CVE-2002-0771 1 Viewcvs 1 Viewcvs 2024-11-20 N/A
Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal cookies via the (1) cvsroot or (2) sortby parameters.