Viewcvs - vulnerabilities (CVEs)

5 CVEs in 1 products, 0 in the last 30 days, newest from 2005-12-31.

Products

• Viewcvs - 5 CVEs

Newest CVEs of Viewcvs

• CVE-2005-4831 - CVSS 4.3 (medium), 2005-12-31: viewcvs in ViewCVS 0.9.2 allows remote attackers to set the Content-Type header to arbitrary values via the content-type parameter, which can be leveraged for…
• CVE-2005-4830 - CVSS 7.6 (high), 2005-12-31: CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks…
• CVE-2004-0915 - CVSS 5 (medium), 2005-01-10: Multiple unknown vulnerabilities in viewcvs before 0.9.2, when exporting a repository as a tar archive, does not properly implement the hide_cvsroot and…
• CVE-2004-1062 - CVSS 4.3 (medium), 2004-12-28: Multiple cross-site scripting (XSS) vulnerabilities in ViewCVS 0.9.2 allow remote attackers to inject arbitrary HTML and web script via certain error messages.
• CVE-2002-0771 - CVSS 6.4 (medium), 2002-08-12: Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal cookies via the (1) cvsroot or (2)…