CVE-2008-5919

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• WebSVN 2.0 - Cross-Site Scripting / File Handling / Code Execution2008-10-23 · webapps · php · Verified

Impact

Directory traversal vulnerability in rss.php in WebSVN 2.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to overwrite arbitrary files via directory traversal sequences in the rev parameter.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/32338
• http://secunia.com/advisories/34191
• http://securityreason.com/securityalert/4928
• http://websvn.tigris.org/issues/show_bug.cgi?id=179
• http://websvn.tigris.org/servlets/NewsItemView?newsItemID=2218
• http://www.gentoo.org/security/en/glsa/glsa-200903-20.xml
• http://www.gulftech.org/?node=research&article_id=00132-10202008
• http://www.securityfocus.com/bid/31891
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46050
• https://www.exploit-db.com/exploits/6822
• http://secunia.com/advisories/32338
• http://secunia.com/advisories/34191
• http://securityreason.com/securityalert/4928
• http://websvn.tigris.org/issues/show_bug.cgi?id=179
• http://websvn.tigris.org/servlets/NewsItemView?newsItemID=2218
• http://www.gentoo.org/security/en/glsa/glsa-200903-20.xml
• http://www.gulftech.org/?node=research&article_id=00132-10202008
• http://www.securityfocus.com/bid/31891
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46050
• https://www.exploit-db.com/exploits/6822