ViewCVS Cross-Site Scripting Vulnerability

Bugtraq ID:	4818
Class:	Input Validation Error
CVE:	CVE-2002-0771
Remote:	Yes
Local:	No
Published:	May 24 2002 12:00AM
Updated:	Jul 11 2009 12:46PM
Credit:	Discovery of this issue is credited to office <office@office.ac>.
Vulnerable:	ViewCVS ViewCVS 0.9.2 - Apache Software Foundation Apache 1.3.24 - Apache Software Foundation Apache 1.3.24 - Apache Software Foundation Apache 1.3.23 - Apache Software Foundation Apache 1.3.23 - Apache Software Foundation Apache 1.3.22 - Apache Software Foundation Apache 1.3.22 - Apache Software Foundation Apache 1.3.20 - Apache Software Foundation Apache 1.3.20 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Debian Linux 3.0 + S.u.S.E. Linux Personal 9.2 + S.u.S.E. Linux Personal 9.1 + S.u.S.E. Linux Personal 9.0 x86_64 + S.u.S.E. Linux Personal 9.0 ViewCVS ViewCVS 0.9.1 - Apache Software Foundation Apache 1.3.24 - Apache Software Foundation Apache 1.3.24 - Apache Software Foundation Apache 1.3.23 - Apache Software Foundation Apache 1.3.23 - Apache Software Foundation Apache 1.3.22 - Apache Software Foundation Apache 1.3.22 - Apache Software Foundation Apache 1.3.20 - Apache Software Foundation Apache 1.3.20 ViewCVS ViewCVS 0.9 - Apache Software Foundation Apache 1.3.24 - Apache Software Foundation Apache 1.3.24 - Apache Software Foundation Apache 1.3.23 - Apache Software Foundation Apache 1.3.23 - Apache Software Foundation Apache 1.3.22 - Apache Software Foundation Apache 1.3.22 - Apache Software Foundation Apache 1.3.20 - Apache Software Foundation Apache 1.3.20 ViewCVS ViewCVS 0.8 - Apache Software Foundation Apache 1.3.24 - Apache Software Foundation Apache 1.3.24 - Apache Software Foundation Apache 1.3.23 - Apache Software Foundation Apache 1.3.23 - Apache Software Foundation Apache 1.3.22 - Apache Software Foundation Apache 1.3.22 - Apache Software Foundation Apache 1.3.20 - Apache Software Foundation Apache 1.3.20

Not Vulnerable: