Unscored CVE-2004-1062 EUVD-2004-1060GHSA-4qgm-jgjc-wjvj

Multiple cross-site scripting (XSS) vulnerabilities in ViewCVS 0.9.2 allow remote attackers to inject arbitrary HTML and web script via cer…

Published Dec 31, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in ViewCVS 0.9.2 allow remote attackers to inject arbitrary HTML and web script via certain error messages.

References

http://www.mikx.de/index.php?p=6
GLSA-200412-26 vendor-advisory
20041223 Cross-Site Scripting - an industry-wide problem mailing-list
SUSE-SR:2005:001 vendor-advisory
viewcvs-xss(18718) vdb-entry