Login Request a demo
Unscored severity · published Mar 31, 2010
CVE-2010-0132
Cross-site scripting (XSS) vulnerability in ViewVC 1.1 before 1.1.5 and 1.0 before 1.0.11, when the regular expression search functionality is enabled, allows remote attackers to…
–
CVSS
2.3%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in ViewVC 1.1 before 1.1.5 and 1.0 before 1.0.11, when the regular expression search functionality is enabled, allows remote attackers to inject arbitrary web script or HTML via vectors related to "search_re input," a different vulnerability than CVE-2010-0736.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VI
Viewvc · Viewvc
1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5; +10 more · source: NVD
Affected product
VI
Viewvc
Viewvc
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-0132
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-0132
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038420.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038456.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038925.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html
Vendor Advisory
http://secunia.com/advisories/38918
Vendor Advisory
http://secunia.com/secunia_research/2010-26/
More from Viewvc
7.5
CVE-2025-54141
ViewVC is a browser interface for CVS and Subversion version control repositories
7.5
CVE-2007-5743
viewvc 1.0.3 allows improper access control to files in a repository when using the "forbidden" configuration option
6.1
CVE-2023-22456
ViewVC, a browser interface for CVS and Subversion version control repositories, as a cross-site scripting vulnerability that affects versions prior to 1.2.2 and 1.1.29
6.1
CVE-2017-5938
Cross-site scripting (XSS) vulnerability in the nav_path function in lib/viewvc.py in ViewVC before 1.0.14 and 1.1.x before 1.1.26 allows remote attackers to inject arbitrary web…
5.4
CVE-2023-22464
ViewVC is a browser interface for CVS and Subversion version control repositories