← CVE Intelligence

CVE-2011-2195

n/a / websvn PUBLISHED

Description (CNA)

A flaw was found in WebSVN 2.3.2. Without prior authentication, if the 'allowDownload' option is enabled in config.php, an attacker can invoke the dl.php script and pass a well formed 'path' argument to execute arbitrary commands against the underlying operating system.

Affected (CNA)

Vendor / productVersions
n/a / websvnaffected websvn 2.3.2

CWE

CWE-78

References

ADP enrichment

CVE

No English description supplied.