Podatność CVE-2010-0132

Podatność CVE-2010-0132

Publikacja: 2010-03-31 Modyfikacja: 2012-02-13

Opis:

	Tytuł	Autor	Data
Low	SViewVC Regular Expression Search 1.1.4 Cross-Site Scripting	Secunia Research...	03.04.2010

Typ:

(Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

Ogólna skala CVSS	Znaczenie	Łatwość wykorzystania
2.6/10	2.9/10	4.9/10

Affected software
Viewvc -> Viewvc

http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038420.html

http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038456.html

http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038925.html

http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html

http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?r1=2342&r2=2359&pathrev=HEAD

http://www.securityfocus.com/archive/1/510408/100/0/threaded

http://www.vupen.com/english/advisories/2010/0743

http://www.vupen.com/english/advisories/2010/0844