What happened
RCE in gitlist via shell upload and cached PHP file command execution (CVE-2014-4511).
Affected versions
Unknown product: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
Exploit-DB 33990Gitlist - Remote Command Execution (Metasploit)Metasploit2014-07-07VerifiedExploit-DB 33929Gitlist 0.4.0 - Remote Code Executiondrone2014-06-30VerifiedSploitusRCE in gitlist via shell upload and cached PHP file command execution (CVE-2014-4511).KitPloit2026-10-13T17:09:58Candidatekitploit.comRCE in gitlist via shell upload and cached PHP file command execution (CVE-2014-4511).en2026-10-13T17:09:58CandidateSource timeline
Discovered through Exploit-DBView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.