CVE-2017-1000214

CRITICAL

GitPHP by xiphux - Command Injection

Title source: llm

GitPHP by xiphux is vulnerable to OS Command Injections

Core 2

Core References

Broken Link x_refsource_confirm

Third Party Advisory x_refsource_confirm

CVSS v3 9.8

EPSS 0.0722

EPSS Percentile 91.6%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-78

Status published

Products (15)

gitphp_project/gitphp 0.0.5

gitphp_project/gitphp 0.0.6

gitphp_project/gitphp 0.0.7

gitphp_project/gitphp 0.0.8

gitphp_project/gitphp 0.0.9

gitphp_project/gitphp 0.1.0

gitphp_project/gitphp 0.1.1

gitphp_project/gitphp 0.2.0

gitphp_project/gitphp 0.2.1

gitphp_project/gitphp 0.2.2

... and 5 more

Published Nov 27, 2017

Tracked Since Feb 18, 2026