Gitlist

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:gitlist:gitlist:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGitlist (06d2fff0-c732-5025-b5e1-13494eca4501)
ProductGitlist (75906b92-a5b0-55a7-809b-40d6852801dd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/mariuscirciu/gitlist purl2cpe 2026-06-01 10:17:37.360326
pkg:github/klaussilveira/gitlist purl2cpe 2026-06-01 10:17:37.360328
pkg:sourceforge/gitlist purl2cpe 2026-06-01 10:17:37.360329

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1000533 vulnerable 2026-06-08 05:10:25.750694 Details available
klaussilveira GitList version <= 0.6 contains a Passing incorrectly sanitized input to system function vulnerability in `searchTree` function that can result in Execute any code as PHP user. This attack appear to be exploitable via Send POST request using search form. This vulnerability appears to have been fixed in 0.7 after commit 87b8c26b023c3fc37f0796b14bb13710f397b322.
Published: 2018-06-26T16:00:00.000Z
Updated: 2024-08-05T12:40:47.178Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4511 vulnerable 2026-06-08 05:05:44.994261 Details available
Gitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in the URI of a request for a (1) blame, (2) file, or (3) stats page, as demonstrated by requests to blame/master/, master/, and stats/master/.
Published: 2014-07-22T14:00:00.000Z
Updated: 2024-08-06T11:20:25.991Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.