twiki twiki 2004-09-02 vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

The history (revision control) function in TWiki 02-Sep-2004 and previous versions allows remote malicious users to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers.

Twiki Twiki 2004-09-01 Twiki Twiki 2004-09-02 Twiki Twiki 2000-12-01 Twiki Twiki 2001-12-01 Twiki Twiki 2003-02-01

3 EDB exploits

4

CVSSv2

TWiki 4.0, 4.0.1, and 20010901 through 20040904 allows remote authenticated users with edit rights to cause a denial of service (infinite recursion leading to CPU and memory consumption) via INCLUDE by URL statements that form a loop, such as a page that includes itself.

Twiki Twiki 2004-09-03 Twiki Twiki 2004-09-04 Twiki Twiki 2004-09-01 Twiki Twiki 2004-09-02 Twiki Twiki 2001-12-01 Twiki Twiki 2003-02-01 Twiki Twiki 2001-09-01 Twiki Twiki 4.0 Twiki Twiki 4.0.1

4

CVSSv2

TWiki 01-Dec-2000 up to 4.0.3 allows remote malicious users to bypass the upload filter and execute arbitrary code via filenames with double extensions such as ".php.en", ".php.1", and other allowed extensions that are not .txt. NOTE: this is only a vulnerabil...

Twiki Twiki 2000-12-01 Twiki Twiki 2004-09-04 Twiki Twiki 4.0 Twiki Twiki 2004-09-02 Twiki Twiki 2004-09-03 Twiki Twiki 2003-02-01 Twiki Twiki 2004-09-01 Twiki Twiki 4.0.2 Twiki Twiki 4.0.3 Twiki Twiki 2001-09-01 Twiki Twiki 2001-12-01 Twiki Twiki 4.0.0 Twiki Twiki 4.0.1

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook