CVE-2013-2294

Multiple cross-site scripting (XSS) vulnerabilities in ViewGit before 0.0.7 allow remote repository users to inject arbitrary web script or HTML via a (1) tag name to the Shortlog table in templates/shortlog.php or branch name to the (2) Shortlog table in templates/shortlog.php or (3) Heads table in plates/summary.php.

• CWE-79

• http://freecode.com/projects/viewgit/releases/353086Release Notes, Third Party Advisory
• http://packetstormsecurity.com/files/120862/ViewGit-0.0.6-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2013/Mar/174Exploit, Mailing List, Third Party Advisory
• http://www.exploit-db.com/exploits/24862Exploit, Third Party Advisory, VDB Entry
• http://freecode.com/projects/viewgit/releases/353086Release Notes, Third Party Advisory
• http://packetstormsecurity.com/files/120862/ViewGit-0.0.6-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2013/Mar/174Exploit, Mailing List, Third Party Advisory
• http://www.exploit-db.com/exploits/24862Exploit, Third Party Advisory, VDB Entry

Published

Jan 30, 2020

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-2279CA SiteMinder Federation (FSS) 12.5, 12.0, and r6; Federatio…
• CVE-2013-2287Multiple cross-site scripting (XSS) vulnerabilities in views…
• CVE-2013-2289Cross-site scripting (XSS) vulnerability in admin/templates/…
• CVE-2013-2290Cross-site scripting (XSS) vulnerability in the dashboard of…
• CVE-2013-2292bitcoind and Bitcoin-Qt 0.8.0 and earlier allow remote attac…
• CVE-2013-2293The CTransaction::FetchInputs method in bitcoind and Bitcoin…
• CVE-2013-2296Walrus in Eucalyptus before 3.2.2 does not verify authorizat…
• CVE-2013-2297Eucalyptus EuStore sets a blank root password in the default…
• CVE-2013-2298Multiple stack-based buffer overflows in the XML parser in B…
• CVE-2013-2299Cross-site scripting (XSS) vulnerability in Advantech WebAcc…
• CVE-2013-2300The FlickWnn (aka OpenWnn/Flick support) application 2.02 an…
• CVE-2013-2301The OMRON OpenWnn application before 1.3.6 for Android uses …