EUVD-2017-1487

Malware in sbrugna...

CVE-2017-1000214

GitPHP by xiphux is vulnerable to OS Command Injections...

Command Injection

Overview czproject/git-php is a Library for work with Git repository in PHP. Affected versions of this package are vulnerable to Command Injection via git argument injection. When calling the isRemoteUrlReadable$url, array $refs = NULL function, both the url and refs parameters are passed to the...

The vulnerability of the GitPHP repository’s web interface, related to the failure to implement measures to neutralize special elements, allows attackers to execute arbitrary commands on the operating system.

The vulnerability of the GitPHP repository web interface is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a malicious actor to execute any command on the operating system remotely...

GitPHP OS Command Injection Vulnerability

GitPHP is a Web-based Git repository browser written in PHP. An operating system command injection vulnerability exists in GitPHP. No detailed vulnerability details are provided at this time...

Command injection

GitPHP by xiphux is vulnerable to OS Command Injections...

CVE-2017-1000214

GitPHP by xiphux is vulnerable to OS Command Injections...

CVE-2017-1000214

GitPHP by xiphux is vulnerable to OS Command Injections...

CVE-2017-1000214

GitPHP by xiphux is vulnerable to an OS command injection (CVE-2017-1000214). NVD lists CVSSv3 base score 9.8 (CRITICAL, network attack vector, no privileges, no user interaction) and CVSSv2 base 10.0. Connected sources confirm the vulnerability exists in GitPHP; however, explicit exploit details...

CVE-2017-1000214

GitPHP by xiphux is vulnerable to OS Command Injections...