CVE-2011-4929
Redmine 0.9.x-1.0.x - Remote Code Execution via Bazaar Repository Adapter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2011-4929.
PoCs published by Metasploit, including Metasploit module exploits/unix/webapp/redmine_scm_exec.
AI-analyzed exploit summary This Metasploit module exploits CVE-2011-4929, a command injection vulnerability in Redmine's SCM repository controller. It sends a crafted GET request with a malicious `rev` parameter to execute arbitrary commands on the target system.
Description
Unspecified vulnerability in the bazaar repository adapter in Redmine 0.9.x and 1.0.x before 1.0.5 allows remote attackers to execute arbitrary commands via unknown vectors.
Exploits (2)
This Metasploit module exploits CVE-2011-4929, a command injection vulnerability in Redmine's SCM repository controller. It sends a crafted GET request with a malicious `rev` parameter to execute arbitrary commands on the target system.
This Metasploit module exploits a command injection vulnerability in Redmine's SCM repository controller by passing a malicious `rev` parameter to execute arbitrary commands. The exploit sends a crafted HTTP GET request with the payload encoded in the `rev` parameter.