Vulnerabilities > Viewcvs > Viewcvs > 0.9.2
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2005-12-31 | CVE-2005-4831 | Cross-Site Scripting vulnerability in Viewcvs 0.9.2 viewcvs in ViewCVS 0.9.2 allows remote attackers to set the Content-Type header to arbitrary values via the content-type parameter, which can be leveraged for cross-site scripting (XSS) and other attacks, as demonstrated using (1) "text/html", or (2) "image/jpeg" with an image that is rendered as HTML by Internet Explorer, a different vulnerability than CVE-2004-1062. network viewcvs | 4.3 |
| 2005-12-31 | CVE-2005-4830 | Unspecified vulnerability in Viewcvs 0.9.2 CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the content-type parameter. | 7.6 |
| 2005-01-10 | CVE-2004-0915 | Multiple unknown vulnerabilities in viewcvs before 0.9.2, when exporting a repository as a tar archive, does not properly implement the hide_cvsroot and forbidden settings, which could allow remote attackers to gain sensitive information. | 5.0 |
| 2004-12-28 | CVE-2004-1062 | Unspecified vulnerability in Viewcvs 0.9.2 Multiple cross-site scripting (XSS) vulnerabilities in ViewCVS 0.9.2 allow remote attackers to inject arbitrary HTML and web script via certain error messages. network viewcvs | 4.3 |
| 2002-08-12 | CVE-2002-0771 | Cross-Site Scripting vulnerability in ViewCVS Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal cookies via the (1) cvsroot or (2) sortby parameters. | 6.4 |