CVE-2014-7236: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to do/view/Main/WebHome...

PT-2020-7732

Name of the Vulnerable Software and Affected Versions TWiki versions prior to 6.0.1 Description The issue allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to the API endpoint "do/view/Main/WebHome". Recommendations For versions prior to 6.0.1, update to...