CVE-2008-5918: XSS
Published Jan 21, 2009
·Updated
Cross-site scripting (XSS) vulnerability in the getParameterisedSelfUrl function in index.php in WebSVN 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO.
Affected Software
20 affected components
Tigris Websvn<=2.0
Tigris Websvn=1.00
Tigris Websvn=1.01
Tigris Websvn=1.02
Tigris Websvn=1.03
Tigris Websvn=1.04
Tigris Websvn=1.10
Tigris Websvn=1.20
Tigris Websvn=1.31a
Tigris Websvn=1.32
Tigris Websvn=1.33
Tigris Websvn=1.34
Tigris Websvn=1.37
Tigris Websvn=1.38
Tigris Websvn=1.39
Tigris Websvn=1.40
Tigris Websvn=1.51
Tigris Websvn=1.60
Tigris Websvn=1.61
Tigris Websvn=1.62
Remediation
Event History
Jan 21, 2009
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Data Sourced
via NVD·02:30 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-5918?
CVE-2008-5918 has a medium severity level due to the potential for cross-site scripting attacks.
2
How do I fix CVE-2008-5918?
To fix CVE-2008-5918, upgrade to WebSVN version 2.1 or later, where the vulnerability is addressed.
3
What software versions are affected by CVE-2008-5918?
CVE-2008-5918 affects WebSVN versions 2.0 and earlier, including specific versions such as 1.00 to 1.62.
4
What type of vulnerability is CVE-2008-5918?
CVE-2008-5918 is a cross-site scripting (XSS) vulnerability that allows remote script injection.
5
Can CVE-2008-5918 be exploited remotely?
Yes, CVE-2008-5918 can be exploited remotely by attackers to inject malicious scripts into web pages.