CVE:CVE-2017-1000214
CNNVD:CNNVD-201711-1096
GitPHP是一款使用PHP编写的基于Web的Git存储库浏览器。
GitPHP中存在操作系统命令注入漏洞。攻击者可利用该漏洞在系统上执行任意命令。
solution:Upgrade gitphp_project gitphp to a higher version than 0.0.5,0.0.6,0.0.7,0.0.8,0.0.9,0.1.0,0.1.1,0.2.0,0.2.1,0.2.2,0.2.3,0.2.4,0.2.5,0.2.6,0.2.7,and avoid the version 0.0.5,0.0.6,0.0.7,0.0.8,0.0.9,0.1.0,0.1.1,0.2.0,0.2.1,0.2.2,0.2.3,0.2.4,0.2.5,0.2.6,0.2.7