NVD

Id
50816  
Name
CVE-2009-3618  
Description
Cross-site scripting (XSS) vulnerability in viewvc.py in ViewVC 1.0 before 1.0.9 and 1.1 before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the view parameter. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-11-09  
Modified Date
2009-12-19  
Seq
2009-3618  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
257222 50816 CVE-2009-3618 SUSE-SR:2009:017  View
257223 50816 CVE-2009-3618 http://viewvc.tigris.org/source/browse/*checkout*/viewvc/tags/1.1.2/CHANGES?revision=2235&pathrev=HEAD  View
257224 50816 CVE-2009-3618 [oss-security] 20091016 Re: viewvc: CVE request: XSS and illegal characters while printing name-value pairs  View
257225 50816 CVE-2009-3618 ADV-2009-2257  View
257226 50816 CVE-2009-3618 viewvc-view-xss(52430)  View
257227 50816 CVE-2009-3618 FEDORA-2009-8501  View
257228 50816 CVE-2009-3618 FEDORA-2009-8507  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45396 JVNDB-2009-006403 ViewVC の viewvc.py におけるクロスサイトスクリプティングの脆弱性 ViewVC の viewvc.py には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-3618 41049 CVE-2009-3618 50816 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006403.html 2009-08-11 2012-12-20 View