CVE-2008-5920
WebSVN 1.x - Remote Code Execution via Username preg_replace Eval Switch
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-5920. PoCs published by GulfTech Security.
AI-analyzed exploit summary This is a detailed technical writeup describing multiple vulnerabilities in WebSVN <= 2.0, including XSS, arbitrary file creation, and PHP code execution. It provides code snippets, exploitation techniques, and root cause analysis.
Description
The create_anchors function in utils.inc in WebSVN 1.x allows remote attackers to execute arbitrary PHP code via a crafted username that is processed by the preg_replace function with the eval switch.
Exploits (1)
This is a detailed technical writeup describing multiple vulnerabilities in WebSVN <= 2.0, including XSS, arbitrary file creation, and PHP code execution. It provides code snippets, exploitation techniques, and root cause analysis.