CVE:CVE-2006-5442
CNNVD:CNNVD-200610-346
ViewVC 1.0.2和更早的版本并未在其HTTP报头或HTML文档中指明字符集，远程攻击者可以执行跨站脚本(XSS)攻击，通过view来注入任意UTF-7编码的JavaScript代码。
solution:Upgrade viewvc viewvc to a higher version than 1.0.2,and avoid the version (,1.0.2]