CVE-2008-5920
Public Exploits 1
ExploitDB · 1 EDB-6822#CVE-2008-5920 [webapps]
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2008-5920
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The create_anchors function in utils.inc in WebSVN 1.x allows remote attackers to execute arbitrary PHP code via a crafted username that is processed by the preg_replace function with the eval switch.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Tigris WebSVN 'utils.inc'代码注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
WebSVN 1.x版本中的utils.inc里的create_anchors函数允许远程攻击者借助一个特制的用户名，执行任意的PHP代码。该用户名由带有eval转换的preg_replace函数进行处理。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2008-5920
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2008-5920
请登录查看更多情报信息。
Vendor Advisories for CVE-2008-5920 (2)
Exploits & Public PoCs for CVE-2008-5920 (1)
Other References for CVE-2008-5920 (1)
Same Patch Batch · n/a · 2009-01-21 · 38 CVEs total
| CVE-2009-0003 | Apple QuickTime Player 堆缓冲区溢出漏洞 | |
| CVE-2008-5932 | CodeAvalanche FreeForum 权限许可和访问控制漏洞 | |
| CVE-2008-5933 | CMS ISWEB 'index.php'多个跨站脚本攻击漏洞 | |
| CVE-2008-5934 | CMS ISWEB 'index.php'SQL注入攻击漏洞 | |
| CVE-2008-5935 | factosystem_weblog 权限许可和访问控制漏洞 | |
| CVE-2008-3864 | Trend Micro Network Security 拒绝服务攻击漏洞 | |
| CVE-2008-3865 | Trend Micro Internet Security 缓冲区错误漏洞 | |
| CVE-2008-3866 | Trend Micro Internet Security产品 安全组件防火墙 安全绕过漏洞 | |
| CVE-2009-0001 | Apple QuickTime 缓冲区错误漏洞 | |
| CVE-2009-0002 | Apple QuickTime Player 堆缓冲区溢出漏洞 | |
| CVE-2008-5931 | Net Guys ASPired2Blog 权限许可和访问控制漏洞 | |
| CVE-2009-0004 | Apple QuickTime Player 缓冲区错误漏洞 | |
| CVE-2009-0005 | Apple QuickTime Player 未明安全漏洞 | |
| CVE-2009-0006 | Apple QuickTime Player 整数符号错误和堆缓冲溢出漏洞 | |
| CVE-2009-0007 | Apple QuickTime Player 堆缓冲区溢出漏洞 | |
| CVE-2009-0026 | Apache Jackrabbit 跨站脚本漏洞 | |
| CVE-2009-0030 | SquirrelMail 授权问题漏洞 | |
| CVE-2009-0243 | Microsoft Windows NoDriveTypeAutoRun自动执行文件漏洞 | |
| CVE-2009-0244 | Microsoft Windows Mobile OBEX FTP服务目录遍历漏洞 | |
| CVE-2008-5922 | cfagcms 'themes/default/index.php'PHP远程文件包含漏洞 |
Showing top 20 of 38 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-9422
KLiK SocialMediaWebsite HTTP POST Request Parameter injectio - CVE-2026-9421
KLiK SocialMediaWebsite File upload.inc.php uniqid unrestric - CVE-2026-9420
KLiK SocialMediaWebsite HTTP GET Request Parameter injection - CVE-2026-9376
JPress UCenter Article Submission Endpoint doWriteSave impro - CVE-2026-9373
JeecgBoot OpenAPI Endpoint call improper authentication
V. Comments for CVE-2008-5920
No comments yet