10
CVSSv2

CVE-2004-1037

Published: 01/03/2005 Updated: 11/07/2017
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

The search function in TWiki 20030201 allows remote malicious users to execute arbitrary commands via shell metacharacters in a search string.

Vulnerable Product Search on Vulmon Subscribe to Product

twiki twiki 2003-02-01

gentoo linux

Exploits

#!/usr/bin/perl # "tweakypl" v 10 beta 2 # # Proof of concept for TWiki vulnerability Remote code execution # Vuln discovered, researched and exploited by RoMaNSoFt <roman rs-labs com> # # Madrid, 30Sep2004 require LWP::UserAgent; use Getopt::Long; ### Default config $host = ''; $path = '/cgi-bin/twiki/search/Main/'; $secure = 0; $ ...
## # $Id: twiki_searchrb 9671 2010-07-03 06:21:31Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class Met ...