CVE-2011-2195

creationtimestamp| type| source ---|---|--- 2021-10-26 16:14:57+00:00| seen| https://t.me/cibsecurity/31211...

CVE-2011-2195

WebSVN 2.3.2 contains an unauthenticated OS command injection when allowDownload is enabled in config.php. An attacker can call the dl.php script with a well-formed path argument to execute arbitrary commands on the underlying OS. The issue is triggered without prior authentication and is tied to...