CVE-2011-4929
Redmine <1.0.5 - RCE
Title source: llmDescription
Unspecified vulnerability in the bazaar repository adapter in Redmine 0.9.x and 1.0.x before 1.0.5 allows remote attackers to execute arbitrary commands via unknown vectors.
Exploits (2)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubyremotelinux
https://www.exploit-db.com/exploits/41695
metasploit
WORKING POC
EXCELLENT
rubypocunix
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/redmine_scm_exec.rb
Scores
EPSS
0.7361
EPSS Percentile
98.8%
Details
Status
published
Products (12)
redmine/redmine
0.9.0
redmine/redmine
0.9.1
redmine/redmine
0.9.2
redmine/redmine
0.9.3
redmine/redmine
0.9.4
redmine/redmine
0.9.5
redmine/redmine
0.9.6
redmine/redmine
1.0.0
redmine/redmine
1.0.1
redmine/redmine
1.0.2
... and 2 more
Published
Oct 08, 2012
Tracked Since
Feb 18, 2026