Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the getLog function in svnlook.php in WebSVN before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to (1) comp.php, (2) diff.php, or (3) revision.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WebSVN ‘getLog’函数跨站脚本漏洞
Vulnerability Description
WebSVN是软件开发者Dirk Thomas所研发的一套基于Web的Subversion Repository(版本管理库)浏览器,它可查看文件或文件夹的日志、查看文件的变化列表、添加或删除任意版本号等。 WebSVN 2.3.1之前的版本中的svnlook.php中的‘getLog’函数中存在跨站脚本(XSS)漏洞。远程攻击者利用该漏洞通过‘path’参数传送到(1)comp.php(2)diff.php或(3)revision.php脚本,注入任意web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A