websvn records
7 published records for vendor websvn.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 42.9%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
65This week | CVE-2021-32305Proof of concept | WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter.websvn · websvn · CWE-78 | Critical9.8 | — | 87.3% | May 18, 2021 |
40Plan | CVE-2011-2195No exploit | A flaw was found in WebSVN 2.3.2.websvn · websvn · CWE-78 | Critical9.8 | — | 2.6% | Oct 26, 2021 |
25Monitor | CVE-2016-2511No exploit | Cross-site scripting (XSS) vulnerability in WebSVN 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the websvn · websvn · CWE-79 | Medium6.1 | — | 1.7% | Apr 7, 2016 |
24Monitor | CVE-2016-1236No exploit | Multiple cross-site scripting (XSS) vulnerabilities in (1) revision.php, (2) log.php, (3) listing.php, and (4) comp.php in WebSVN allow contwebsvn · websvn · CWE-79 | Medium6.1 | — | 0.8% | May 11, 2016 |
18Monitor | CVE-2011-5221No exploit | Cross-site scripting (XSS) vulnerability in the getLog function in svnlook.php in WebSVN before 2.3.1 allows remote attackers to inject arbiwebsvn · websvn · CWE-79 | Medium4.3 | — | 2.4% | Oct 25, 2012 |
17Monitor | CVE-2007-3056No exploit | Cross-site scripting (XSS) vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly earlier, allows remote attackers to inject arbitrwebsvn · websvn · CWE-79 | Medium4.3 | — | 1.5% | Jun 5, 2007 |
14Monitor | CVE-2013-6892No exploit | WebSVN 2.3.3 allows remote authenticated users to read arbitrary files via a symlink attack in a commit.websvn · websvn · CWE-200 | Low3.5 | — | 0.9% | Jan 21, 2015 |
- CVE-2021-3230565This week
WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter.
CriticalCVSS 9.8Proof of conceptEPSS 87%websvn · websvnMay 18, 2021
- CVE-2011-219540Plan
A flaw was found in WebSVN 2.3.2.
CriticalCVSS 9.8No exploitEPSS 2%websvn · websvnOct 26, 2021
- CVE-2016-251125Monitor
Cross-site scripting (XSS) vulnerability in WebSVN 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the
MediumCVSS 6.1No exploitEPSS 1%websvn · websvnApr 7, 2016
- CVE-2016-123624Monitor
Multiple cross-site scripting (XSS) vulnerabilities in (1) revision.php, (2) log.php, (3) listing.php, and (4) comp.php in WebSVN allow cont
MediumCVSS 6.1No exploitEPSS 0%websvn · websvnMay 11, 2016
- CVE-2011-522118Monitor
Cross-site scripting (XSS) vulnerability in the getLog function in svnlook.php in WebSVN before 2.3.1 allows remote attackers to inject arbi
MediumCVSS 4.3No exploitEPSS 2%websvn · websvnOct 25, 2012
- CVE-2007-305617Monitor
Cross-site scripting (XSS) vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly earlier, allows remote attackers to inject arbitr
MediumCVSS 4.3No exploitEPSS 1%websvn · websvnJun 5, 2007
- CVE-2013-689214Monitor
WebSVN 2.3.3 allows remote authenticated users to read arbitrary files via a symlink attack in a commit.
LowCVSS 3.5No exploitEPSS 0%websvn · websvnJan 21, 2015