NVD

Id
11707  
Name
CVE-2010-0132  
Description
Cross-site scripting (XSS) vulnerability in ViewVC 1.1 before 1.1.5 and 1.0 before 1.0.11, when the regular expression search functionality is enabled, allows remote attackers to inject arbitrary web script or HTML via vectors related to "search_re input," a different vulnerability than CVE-2010-0736.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-03-31  
Modified Date
2010-05-20  
Seq
2010-0132  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
64301 11707 CVE-2010-0132 FEDORA-2010-5507  View
64302 11707 CVE-2010-0132 FEDORA-2010-5524  View
64303 11707 CVE-2010-0132 FEDORA-2010-5805  View
64304 11707 CVE-2010-0132 SUSE-SR:2010:009  View
64305 11707 CVE-2010-0132 http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?r1=2342&r2=2359&pathrev=HEAD  View
64306 11707 CVE-2010-0132 20100330 Secunia Research: ViewVC Regular Expression Search Cross-Site Scripting  View
64307 11707 CVE-2010-0132 ADV-2010-0743  View
64308 11707 CVE-2010-0132 ADV-2010-0844  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39421 JVNDB-2010-005206 ViewVC におけるクロスサイトスクリプティングの脆弱性 ViewVC は、正規表現検索機能が有効になっている際、"search_re 入力" に関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-0132 42712 CVE-2010-0132 11707 2.6 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005206.html 2010-03-29 2012-12-20 View