CVE-2008-5919

Directory traversal vulnerability in rss.php in WebSVN 2.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to overwrite arbitrary files via directory traversal sequences in the rev parameter.

Link	Resource
http://websvn.tigris.org/servlets/NewsItemView?newsItemID=2218	Patch
http://www.securityfocus.com/bid/31891	Exploit
http://websvn.tigris.org/issues/show_bug.cgi?id=179
http://secunia.com/advisories/32338	Vendor Advisory
http://www.gulftech.org/?node=research&article_id=00132-10202008	Exploit
http://securityreason.com/securityalert/4928
http://www.gentoo.org/security/en/glsa/glsa-200903-20.xml
http://secunia.com/advisories/34191
https://exchange.xforce.ibmcloud.com/vulnerabilities/46050
https://www.exploit-db.com/exploits/6822

Configuration 1

cpe:2.3:a:tigris:websvn:1.20:*:*:*:*:*:*:* cpe:2.3:a:tigris:websvn:1.34:*:*:*:*:*:*:* cpe:2.3:a:tigris:websvn:1.02:*:*:*:*:*:*:* cpe:2.3:a:tigris:websvn:1.03:*:*:*:*:*:*:* cpe:2.3:a:tigris:websvn:1.37:*:*:*:*:*:*:* cpe:2.3:a:tigris:websvn:1.51:*:*:*:*:*:*:* cpe:2.3:a:tigris:websvn:1.39:*:*:*:*:*:*:* cpe:2.3:a:tigris:websvn:1.10:*:*:*:*:*:*:* cpe:2.3:a:tigris:websvn:1.32:*:*:*:*:*:*:* cpe:2.3:a:tigris:websvn:1.60:*:*:*:*:*:*:* cpe:2.3:a:tigris:websvn:1.00:*:*:*:*:*:*:* cpe:2.3:a:tigris:websvn:*:*:*:*:*:*:*:* cpe:2.3:a:tigris:websvn:1.38:*:*:*:*:*:*:* cpe:2.3:a:tigris:websvn:1.01:*:*:*:*:*:*:* cpe:2.3:a:tigris:websvn:1.40:*:*:*:*:*:*:* cpe:2.3:a:tigris:websvn:1.62:*:*:*:*:*:*:* cpe:2.3:a:tigris:websvn:1.31a:*:*:*:*:*:*:* cpe:2.3:a:tigris:websvn:1.04:*:*:*:*:*:*:* cpe:2.3:a:tigris:websvn:1.61:*:*:*:*:*:*:* cpe:2.3:a:tigris:websvn:1.33:*:*:*:*:*:*:*

---

Published : 2009-01-21 02:30

Updated : 2017-09-29 01:32

---

NVD link : CVE-2008-5919

Mitre link : CVE-2008-5919

No products.

CWE-22