| Package | Affected versions | Patched versions |
|---|---|---|
| websvn | = 1.00= 1.01= 1.02= 1.03= 1.04= 1.10= 1.20= 1.31a= 1.32= 1.33= 1.34= 1.37= 1.38= 1.39= 1.40= 1.51= 1.60= 1.61= 1.62 |
The create_anchors function in utils.inc in WebSVN 1.x allows remote attackers to execute arbitrary PHP code via a crafted username that is processed by the preg_replace function with the eval switch.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free