The Git plugin for FusionForge before 6.0rc4 allows remote attackers to execute arbitrary code via an unspecified parameter when creating a secondary Git repository.Referenceshttps://fusionforge.org/forum/forum.php?forum_id=41http://www.debian.org/security/2015/dsa-3275
