PRIOn knowledge basePRION:CVE-2011-5221

HistoryOct 25, 2012 - 5:55 p.m.

Cross site scripting

2012-10-2517:55:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.5%

JSON

Cross-site scripting (XSS) vulnerability in the getLog function in svnlook.php in WebSVN before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to (1) comp.php, (2) diff.php, or (3) revision.php.

CPENameOperatorVersion
websvneq2.1.0
websvnle2.3.0
websvneq2.2.0
websvneq1.61
websvneq2.0
websvneq2.2.1

Name	Operator	Version
websvn	eq	2.1.0
websvn	le	2.3.0
websvn	eq	2.2.0
websvn	eq	1.61
websvn	eq	2.0
websvn	eq	2.2.1

References

osvdb.org/77941

osvdb.org/77942

osvdb.org/77943

secunia.com/advisories/47288

websvn.tigris.org/issues/show_bug.cgi?id=275

www.securityfocus.com/bid/51109

www.securitytracker.com/id?1026438

exchange.xforce.ibmcloud.com/vulnerabilities/71888

st2tea.blogspot.com/2011/12/websvn-cross-site-scripting.html