GCVE - cpe:2.3:a:websvn:websvn:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:websvn:websvn:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Websvn (`126069b8-3adb-588f-a6f1-873e0640e59d`)
Product	Websvn (`c50b4fbf-870f-5b13-a3f2-d09f28c87827`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/websvnphp/websvn`	purl2cpe	2026-06-01 10:18:00.945408
`pkg:rpm/fedora/websvn`	purl2cpe	2026-06-01 10:18:00.945412
`pkg:rpm/opensuse/websvn`	purl2cpe	2026-06-01 10:18:00.945416

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-32305`	vulnerable	2026-06-08 05:31:54.763561	Details available WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter. Published: 2021-05-18T16:11:10.000Z Updated: 2024-08-03T23:17:29.282Z Open on db.gcve.eu Reference links https://github.com/websvnphp/websvn/pull/142 http://packetstormsecurity.com/files/163225/Websvn-2.6.0-Remote-Code-Execution.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-2511`	vulnerable	2026-06-08 05:07:42.388578	Details available Cross-site scripting (XSS) vulnerability in WebSVN 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the path parameter to log.php. Published: 2016-04-07T21:00:00.000Z Updated: 2024-08-05T23:32:20.124Z Open on db.gcve.eu Reference links http://packetstormsecurity.com/files/135886/WebSVN-2.3.3-Cross-Site-Scripting.html http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179168.html http://www.debian.org/security/2016/dsa-3490 http://seclists.org/fulldisclosure/2016/Feb/99	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-1236`	vulnerable	2026-06-08 05:07:26.811725	Details available Multiple cross-site scripting (XSS) vulnerabilities in (1) revision.php, (2) log.php, (3) listing.php, and (4) comp.php in WebSVN allow context-dependent attackers to inject arbitrary web script or HTML via the name of a (a) file or (b) directory in a repository. Published: 2016-05-11T21:00:00.000Z Updated: 2024-08-05T22:48:13.636Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2016/05/05/22 https://bugzilla.redhat.com/show_bug.cgi?id=1333673 http://www.debian.org/security/2016/dsa-3572	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-5221`	vulnerable	2026-06-08 04:59:35.198357	Details available Cross-site scripting (XSS) vulnerability in the getLog function in svnlook.php in WebSVN before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to (1) comp.php, (2) diff.php, or (3) revision.php. Published: 2012-10-25T17:00:00.000Z Updated: 2024-08-07T00:30:46.896Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/51109 http://websvn.tigris.org/issues/show_bug.cgi?id=275 http://osvdb.org/77942 http://st2tea.blogspot.com/2011/12/websvn-cross-site-scripting.html http://www.securitytracker.com/id?1026438	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-3056`	vulnerable	2026-06-08 04:49:46.743560	Details available Cross-site scripting (XSS) vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the path parameter. Published: 2007-06-06T01:00:00.000Z Updated: 2024-08-07T14:05:27.887Z Open on db.gcve.eu Reference links http://bugs.gentoo.org/show_bug.cgi?id=180879 http://www.securityfocus.com/bid/24310 http://osvdb.org/36409 http://websvn.tigris.org/servlets/ReadMsg?list=dev&msgNo=1328 http://secunia.com/advisories/25532	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Websvn

Notes

PURL mappings

Vulnerability references

Contribute