https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2005-4831.htmlhttps://patchthecve.com/cve/CVE-2005-4831.htmlTue, 16 Jun 2026 22:19:32 +0000MEDIUM 4.3: viewcvs in ViewCVS 0.9.2 allows remote attackers to set the Content-Type header to arbitrary values via the content-type parameter, which can be leveraged for cross-site scripting (XSS) and other attacks, as demonstrated using (1) "text/html", or (2) "image/jpeg" with an image that is rendered as HThttps://patchthecve.com/cve/CVE-2005-4830.htmlhttps://patchthecve.com/cve/CVE-2005-4830.htmlTue, 16 Jun 2026 22:19:31 +0000HIGH 7.6: CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the content-type parameter.https://patchthecve.com/cve/CVE-2004-0915.htmlhttps://patchthecve.com/cve/CVE-2004-0915.htmlTue, 16 Jun 2026 22:06:39 +0000MEDIUM 5.0: Multiple unknown vulnerabilities in viewcvs before 0.9.2, when exporting a repository as a tar archive, does not properly implement the hide_cvsroot and forbidden settings, which could allow remote attackers to gain sensitive information.https://patchthecve.com/cve/CVE-2004-1062.htmlhttps://patchthecve.com/cve/CVE-2004-1062.htmlTue, 16 Jun 2026 22:06:56 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in ViewCVS 0.9.2 allow remote attackers to inject arbitrary HTML and web script via certain error messages.https://patchthecve.com/cve/CVE-2002-0771.htmlhttps://patchthecve.com/cve/CVE-2002-0771.htmlTue, 16 Jun 2026 21:58:06 +0000MEDIUM 6.4: Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal cookies via the (1) cvsroot or (2) sortby parameters.