Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2013-2294: Multiple cross-site scripting (XSS) vulnerabilities in ViewGit before 0.0.7 allow remote repository users to inject arbitrary web script or HTML via a (1) tag name to the Shortlog table in template...

CVE-2013-2294 · published 6 years ago

Summary

Multiple cross-site scripting (XSS) vulnerabilities in ViewGit before 0.0.7 allow remote repository users to inject arbitrary web script or HTML via a (1) tag name to the Shortlog table in templates/shortlog.php or branch name to the (2) Shortlog table in templates/shortlog.php or (3) Heads table in...

What to do

Update viewgit_project viewgit to version 0.0.7 or later.

Affected software

Vendor	Product	Affected versions
viewgit_project	viewgit	< 0.0.7 `cpe:2.3:a:viewgit_project:viewgit::::::::`

Original advisory text

References

http://freecode.com/projects/viewgit/releases/353086 Release Notes Third Party Advisory
http://packetstormsecurity.com/files/120862/ViewGit-0.0.6-Cross-Site-Scripting.h... Exploit Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2013/Mar/174 Exploit Mailing List Third Party Advisory
http://www.exploit-db.com/exploits/24862 Exploit Third Party Advisory VDB Entry

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

6.1 Medium

Exploitation

4% chance of attack within 30 days

Type

CWE-79Cross-site Scripting (XSS)

Timeline

Published30 Jan 2020

Updated23 Oct 2026

First seen29 Sep 2026

Sources

CVE-2013-2294 · NVD

Track software like this

Free during beta