PT-2014-5942

Name of the Vulnerable Software and Affected Versions Gitlist versions prior to 0.5.0 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in the URI of a request for a blame, file, or stats page. This can be demonstrated by request...