Subversion < 1.6.23 - Authenticated Remote Code Execution via Shell Metacharacters in Filename
contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated users with commit permissions to execute arbitrary commands via shell metacharacters in a filename.