Description
Cross-site scripting (XSS) vulnerability in the getLog function in svnlook.php in WebSVN before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to (1) comp.php, (2) diff.php, or (3) revision.php.
References
- 51109 vdb-entry
- http://websvn.tigris.org/issues/show_bug.cgi?id=275
- 77942 vdb-entry
- http://st2tea.blogspot.com/2011/12/websvn-cross-site-scripting.html
- 1026438 vdb-entry
- 47288 third-party-advisory
- 77941 vdb-entry
- websvn-path-xss(71888) vdb-entry
- 77943 vdb-entry