CVE-2007-3056

Publication date 6 June 2007

Last updated 17 July 2025


Ubuntu priority

Description

Cross-site scripting (XSS) vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the path parameter.

Status

Package Ubuntu Release Status
websvn 9.10 karmic
Fixed 1.61-22.2
9.04 jaunty
Fixed 1.61-22.2
8.10 intrepid
Fixed 1.61-22.2
8.04 LTS hardy
Fixed 1.61-22.2
7.10 gutsy
Fixed 1.61-22.2
7.04 feisty Ignored end of life, was needed
6.10 edgy Ignored end of life, was needed
6.06 LTS dapper Ignored end of life