Gitlist

gitlist

4 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-1000533 1Gitlist 1Gitlist Nov 21, 2024 Jun 26, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 klaussilveira GitList version <= 0.6 contains a Passing incorrectly sanitized input to system function vulnerability in `searchTree` function that can result in Execute any code as PHP user. This attack appear to be expl...Show more klaussilveira GitList version <= 0.6 contains a Passing incorrectly sanitized input to system function vulnerability in `searchTree` function that can result in Execute any code as PHP user. This attack appear to be exploitable via Send POST request using search form. This vulnerability appears to have been fixed in 0.7 after commit 87b8c26b023c3fc37f0796b14bb13710f397b322.Show less
CVE-2014-5023 1Gitlist 1Gitlist May 6, 2026 Jul 22, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Repository.php in Gitter, as used in Gitlist, allows remote attackers with commit privileges to execute arbitrary commands via shell metacharacters in a branch name, as demonstrated by a "git checkout -b" command.
CVE-2014-4511 1Gitlist 1Gitlist May 6, 2026 Jul 22, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 Gitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in the URI of a request for a (1) blame, (2) file, or (3) stats page, as demonstrated by requests to bl...Show more Gitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in the URI of a request for a (1) blame, (2) file, or (3) stats page, as demonstrated by requests to blame/master/, master/, and stats/master/.Show less
CVE-2013-7392 1Gitlist 1Gitlist May 6, 2026 Jul 22, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 Gitlist allows remote attackers to execute arbitrary commands via shell metacharacters in a file name to Source/.