Lucene search
HistoryJul 27, 2006 - 1:04 a.m.
CVE-2006-3819
cve
2006
3819
eval
injection
vulnerability
twiki
4.0
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
Low
0.111 Low
EPSS
Percentile
95.2%
Eval injection vulnerability in the configure script in TWiki 4.0.0 through 4.0.4 allows remote attackers to execute arbitrary Perl code via an HTTP POST request containing a parameter name starting with “TYPEOF”.
Affected configurations
Node
twikitwikiMatch4.0
ORtwikitwikiMatch4.0.0
ORtwikitwikiMatch4.0.1
ORtwikitwikiMatch4.0.2
ORtwikitwikiMatch4.0.3
ORtwikitwikiMatch4.0.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| twiki:twiki | twiki | eq | 4.0 |
| twiki:twiki | twiki | eq | 4.0.0 |
| twiki:twiki | twiki | eq | 4.0.1 |
| twiki:twiki | twiki | eq | 4.0.2 |
| twiki:twiki | twiki | eq | 4.0.3 |
| twiki:twiki | twiki | eq | 4.0.4 |
Related
nessus
nessus
TWiki configure Script Arbitrary Command Execution
2006-07-31 00:00:00
nvd
nvd
CVE-2006-3819
2006-07-27 01:04:00
cvelist
cvelist
CVE-2006-3819
2006-07-27 01:00:00
ubuntucve
ubuntucve
CVE-2006-3819
2006-07-27 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
Low
0.111 Low
EPSS
Percentile
95.2%
Related for CVE-2006-3819