NetSight
medium4.3

CVE-2014-4719

Cross-site scripting (XSS) vulnerability in the login panel (svn/login/) in User-Friendly SVN (aka USVN) before 1.0.7 allows remote attackers to inject arbitra…

Impact

Cross-site scripting (XSS) vulnerability in the login panel (svn/login/) in User-Friendly SVN (aka USVN) before 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the username field.

Affected products

VendorProductAffected versions
UsvnUser-Friendly Svn
through 1.0.5
Versions 0.6, 0.6.1, 0.6.2, 0.6.3, 0.6.4

Weakness classification

References