cve/2021/CVE-2021-32305.md

CVE-2021-32305

Description

WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter.

POC

Reference

• http://packetstormsecurity.com/files/163225/Websvn-2.6.0-Remote-Code-Execution.html

Github

• https://github.com/20142995/Goby
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/FredBrave/CVE-2021-32305-websvn-2.6.0
• https://github.com/HimmelAward/Goby_POC
• https://github.com/Z0fhack/Goby_POC
• https://github.com/superlink996/chunqiuyunjingbachang
• https://github.com/xinyisleep/pocscan