CVE-2010-0132

Cross-site scripting (XSS) vulnerability in ViewVC 1.1 before 1.1.5 and 1.0 before 1.0.11, when the regular expression search functionality is enabled, allows remote attackers to inject arbitrary web script or HTML via vectors related to "search_re input," a different vulnerability than CVE-2010-0736.

• CWE-79

• http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038420.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038456.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038925.html
• http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html
• http://secunia.com/advisories/38918Vendor Advisory
• http://secunia.com/secunia_research/2010-26/Vendor Advisory
• http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?r1=2342&r2=2359&pathrev=HEAD
• http://www.securityfocus.com/archive/1/510408/100/0/threaded
• http://www.vupen.com/english/advisories/2010/0743Patch, Vendor Advisory
• http://www.vupen.com/english/advisories/2010/0844
• http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038420.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038456.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038925.html
• http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html
• http://secunia.com/advisories/38918Vendor Advisory
• http://secunia.com/secunia_research/2010-26/Vendor Advisory
• http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?r1=2342&r2=2359&pathrev=HEAD
• http://www.securityfocus.com/archive/1/510408/100/0/threaded
• http://www.vupen.com/english/advisories/2010/0743Patch, Vendor Advisory
• http://www.vupen.com/english/advisories/2010/0844

Published

Mar 31, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0126Heap-based buffer overflow in an unspecified library in Auto…
• CVE-2010-0127Adobe Shockwave Player before 11.5.7.609 allows remote attac…8.8
• CVE-2010-0128Integer signedness error in dirapi.dll in Adobe Shockwave Pl…
• CVE-2010-0129Multiple integer overflows in Adobe Shockwave Player before …8.8
• CVE-2010-0130Integer overflow in Adobe Shockwave Player before 11.5.7.609…8.8
• CVE-2010-0131Stack-based buffer overflow in the SpreadSheet Lotus 123 rea…
• CVE-2010-0133Multiple stack-based buffer overflows in the SpreadSheet Lot…
• CVE-2010-0134Integer signedness error in rtfsr.dll in Autonomy KeyView 10…
• CVE-2010-0135Heap-based buffer overflow in the WordPerfect 5.x reader (wo…
• CVE-2010-0136OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not proper…
• CVE-2010-0137Unspecified vulnerability in the sshd_child_handler process …
• CVE-2010-0138Buffer overflow in Cisco CiscoWorks Internetwork Performance…