VDB
CVE-2010-0132
CVE-2010-0132
PUBLISHED
CVSS 2.5999999046325684 LOW
Cross-site scripting (XSS) vulnerability in ViewVC 1.1 before 1.1.5 and 1.0 before 1.0.11, when the regular expression search functionality is enabled, allows remote attackers to inject arbitrary web script or HTML via vectors related to "search_re input," a different vulnerability than CVE-2010-0736.
EPSS 2.33% · 83.3th percentile
Risk Scores
CVSS 2.0
2.5999999046325684
EPSS Score
2.33%
83.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| viewvc | viewvc | 1.0.6, 1.0.1, 1.0.2 |
| n/a | n/a | n/a |
Timeline
- Mar 31, 2010 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 28, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Apr 5, 2023 EPSS Score
- May 28, 2023 EPSS Score
- Jul 20, 2023 EPSS Score
References
- http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?r1=2342&r2=2359&pathrev=HEAD url
- http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038925.html technical
- http://secunia.com/secunia_research/2010-26/ advisory
- http://www.vupen.com/english/advisories/2010/0743 patch
- http://www.vupen.com/english/advisories/2010/0844 technical
- https://nvd.nist.gov/vuln/detail/CVE-2010-0132 advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038420.html url
- http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038456.html url
- http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html url
- http://secunia.com/advisories/38918 url
- http://secunia.com/secunia_research/2010-26 url
- http://www.securityfocus.com/archive/1/510408/100/0/threaded url