Gitlist allows remote malicious users to execute arbitrary commands via shell metacharacters in a file name to Source/.
gitlist gitlist -