CVE:CVE-2012-5314
CNNVD:CNNVD-201202-035
ViewGit 0.0.6版本和早期版本中存在跨站脚本漏洞，该漏洞源于对用户提供的数据未经充分过滤。攻击者可利用该漏洞在受影响站点上下文的不知情用户浏览器上执行任意脚本代码，这可能有助于攻击者盗取基于cookie的认证证书进而发起其他攻击。
solution:Upgrade heikki_hokkanen viewgit to a higher version than 0.0.6,0.0.1,0.0.2,0.0.3,0.0.4,0.0.5,and avoid the version (,0.0.6],0.0.1,0.0.2,0.0.3,0.0.4,0.0.5