Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-7236
HistoryFeb 17, 2020 - 10:15 p.m.

CVE-2014-7236

2020-02-1722:15:11
CWE-74
[email protected]
web.nvd.nist.gov
64
cve
2014
7236
eval
injection
vulnerability
twiki
plugins

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

9.3 High

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

JSON

Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to do/view/Main/WebHome.

CPE configuration

NVD
twikitwikiRange4.0–4.0.5
OR
twikitwikiRange4.1–4.1.2
OR
twikitwikiRange4.2–4.2.4
OR
twikitwikiRange4.3–4.3.2
OR
twikitwikiRange5.0–5.0.2
OR
twikitwikiRange5.1.0–5.1.4
OR
twikitwikiMatch6.0

Related

checkpoint_advisories 1
dsquare 1
cvelist 1
freebsd 1
zdt 2
packetstorm 2
openvas 1
prion 1
saint 4
metasploit 1
nessus 2
exploitdb 1
nvd 1
checkpoint_advisories
checkpoint_advisories
Twiki Unauthenticated Remote Code Execution (CVE-2014-7236)
2014-12-03 00:00:00
dsquare
dsquare
TWiki debugenableplugins RCE
2015-09-01 00:00:00
cvelist
cvelist
CVE-2014-7236
2020-02-17 21:14:54
freebsd
freebsd
twiki -- remote Perl code execution
2014-10-09 00:00:00
zdt
zdt
TWiki Debugenableplugins Remote Code Execution Exploit
2015-03-19 00:00:00
Twiki Perl 4.x, 5.x, 6.x Upload Bypass / Code Execution Vulnerabilities
2014-10-10 00:00:00
packetstorm
packetstorm
TWiki Debugenableplugins Remote Code Execution
2015-03-19 00:00:00
Twiki Perl Code Execution
2014-10-10 00:00:00
openvas
openvas
TWiki 'debugenableplugins' Parameter Remote Code Execution Vulnerability
2014-10-27 00:00:00
prion
prion
Sql injection
2020-02-17 22:15:00
saint
saint
TWiki View Script debugenableplugins Request Parameter Vulnerability
2015-03-30 00:00:00
TWiki View Script debugenableplugins Request Parameter Vulnerability
2015-03-30 00:00:00
TWiki View Script debugenableplugins Request Parameter Vulnerability
2015-03-30 00:00:00
metasploit
metasploit
TWiki Debugenableplugins Remote Code Execution
2015-03-18 08:45:08
nessus
nessus
FreeBSD : twiki -- remote Perl code execution (21ce1840-6107-11e4-9e84-0022156e8794)
2014-11-03 00:00:00
TWiki 'debugenableplugins' Parameter RCE
2015-04-20 00:00:00
exploitdb
exploitdb
TWiki Debugenableplugins - Remote Code Execution (Metasploit)
2015-03-19 00:00:00
nvd
nvd
NVD:CVE-2014-7236
2020-02-17 22:15:11

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

9.3 High

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

JSON
Related for CVE-2014-7236
checkpoint_advisories1dsquare1cvelist1freebsd1zdt2packetstorm2openvas1prion1saint4metasploit1nessus2exploitdb1nvd1