twiki twiki 2004-09-04 vulnerabilities and exploits

(subscribe to this query)

TWiki 4.0, 4.0.1, and 20010901 through 20040904 allows remote authenticated users with edit rights to cause a denial of service (infinite recursion leading to CPU and memory consumption) via INCLUDE by URL statements that form a loop, such as a page that includes itself.

Twiki Twiki 2004-09-03 Twiki Twiki 2004-09-04 Twiki Twiki 2004-09-01 Twiki Twiki 2004-09-02 Twiki Twiki 2001-12-01 Twiki Twiki 2003-02-01 Twiki Twiki 2001-09-01 Twiki Twiki 4.0 Twiki Twiki 4.0.1

TWiki 01-Dec-2000 up to 4.0.3 allows remote malicious users to bypass the upload filter and execute arbitrary code via filenames with double extensions such as ".php.en", ".php.1", and other allowed extensions that are not .txt. NOTE: this is only a vulnerabil...

Twiki Twiki 2000-12-01 Twiki Twiki 2004-09-04 Twiki Twiki 4.0 Twiki Twiki 2004-09-02 Twiki Twiki 2004-09-03 Twiki Twiki 2003-02-01 Twiki Twiki 2004-09-01 Twiki Twiki 4.0.2 Twiki Twiki 4.0.3 Twiki Twiki 2001-09-01 Twiki Twiki 2001-12-01 Twiki Twiki 4.0.0 Twiki Twiki 4.0.1

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook