Lucene search
HistoryJan 21, 2009 - 2:30 a.m.
CVE-2008-5920
websvn
1.x
create_anchors
remote code execution
cve-2008-5920
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.1%
The create_anchors function in utils.inc in WebSVN 1.x allows remote attackers to execute arbitrary PHP code via a crafted username that is processed by the preg_replace function with the eval switch.
Affected configurations
Node
tigriswebsvnMatch1.00
ORtigriswebsvnMatch1.01
ORtigriswebsvnMatch1.02
ORtigriswebsvnMatch1.03
ORtigriswebsvnMatch1.04
ORtigriswebsvnMatch1.10
ORtigriswebsvnMatch1.20
ORtigriswebsvnMatch1.31a
ORtigriswebsvnMatch1.32
ORtigriswebsvnMatch1.33
ORtigriswebsvnMatch1.34
ORtigriswebsvnMatch1.37
ORtigriswebsvnMatch1.38
ORtigriswebsvnMatch1.39
ORtigriswebsvnMatch1.40
ORtigriswebsvnMatch1.51
ORtigriswebsvnMatch1.60
ORtigriswebsvnMatch1.61
ORtigriswebsvnMatch1.62
Related
cvelist
cvelist
CVE-2008-5920
2009-01-21 02:00:00
nvd
nvd
CVE-2008-5920
2009-01-21 02:30:00
ubuntucve
ubuntucve
CVE-2008-5920
2009-01-21 00:00:00
prion
prion
Code injection
2009-01-21 02:30:00
openvas
openvas
WebSVN < 2.1.0 Multiple Vulnerabilities
2009-01-23 00:00:00
WebSVN Script Multiple Vulnerabilities
2009-01-23 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.1%
Related for CVE-2008-5920