References https://github.com/vulhub/vulhub/blob/master/gitlist/CVE-2018-1000533/README.md https://www.exploit-db.com/exploits/44548 http://chybeta.github.io/2018/04/30/GitList-0-6-Unauthenticated-RCE-%E5%88%86%E6%9E%90/ https://blog.csdn.net/zy15667076526/article/details/111414502 https://github.com/bakery312/Vulhub-Reproduce/blob/main/Gitlist%200.6.0%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%20CVE-2018-1000533.md https://nvd.nist.gov/vuln/detail/CVE-2018-1000533 https://www.rapid7.com/db/modules/exploit/multi/http/gitlist_arg_injection/ https://github.com/klaussilveira/gitlist/commit/87b8c26b023c3fc37f0796b14bb13710f397b322
Related VulnerabilitiesPoCCVE-2018-1000533: GitList < 0.6.0 Remote Code ExecutionPoCCVE-2018-1000533: GitList < 0.6.0 RCEPoCgitlist-disclosure: GitList DisclosureGitList searchTree方法远程命令执行漏洞GitList 远程代码执行漏洞