PT-2014-4018

Name of the Vulnerable Software and Affected Versions FitNesse Wiki versions 20131110, 20140201, and earlier Description The issue allows remote attackers to execute arbitrary commands. This is achieved by defining a COMMAND PATTERN and TEST RUNNER in the pageContent parameter when editing a page...

CVE-2014-1216: Undefined Security Weakness

FitNesse Wiki 20131110, 20140201, and earlier allows remote attackers to execute arbitrary commands by defining a COMMANDPATTERN and TESTRUNNER in the pageContent parameter when editing a page...

Fitnesse Wiki Remote Command Execution Vulnerability

This Metasploit module exploits a vulnerability found in Fitnesse Wiki, version 20140201 and earlier. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Fitnesse Wiki Remote Command...

Fitnesse Wiki Remote Command Execution

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Fitnesse Wiki Remote Command Execution', 'Description' = %q This module exploits a vulnerability found in Fitnesse Wiki, version...

Fitnesse Wiki - Remote Command Execution (Metasploit)

Fitnesse Wiki - Remote Command Execution Metasploit This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Fitnesse Wiki Remote Command Execution', 'Description' = %q This module exploits ...

Fitnesse Wiki - Remote Command Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Fitnesse Wiki Remote Command Execution', 'Description' = %q This module exploits a vulnerability found in Fitnesse Wiki, version...

Fitnesse Wiki RCE Vulnerability

Fitnesse Wiki is prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fitnesse远程代码执行漏洞

Bugtraq ID:65921 CVE ID:CVE-2014-1216 FitNesse是一套软件开发协作工具。 Fitnesse Wiki不正确校验已编辑页面语法参数数据，允许远程攻击者利用漏洞提交特殊的请求以应用程序上下文执行任意命令。 0 Fitnesse Wiki v20131110 目前没有详细解决方案提供： http://www.fitnesse.org POST /any page HTTP/1.1 Host: host:port Proxy-Connection: keep-alive Content-Length: 374 Accept:...

Fitnesse Wiki 20131110 Remote Command Execution

Fitnesse Wiki 20131110 suffers from a remote command execution vulnerability. Vulnerability title: Remote Command Execution in Fitnesse Wiki CVE: CVE-2014-1216 Vendor: Fitnesse Product: Wiki Affected version: v20131110 and earlier Fixed version: N/A Reported by: Jerzy Kramarz Details: The Fitness...

Fitnesse Wiki 20131110 Remote Command Execution

Vulnerability title: Remote Command Execution in Fitnesse Wiki CVE: CVE-2014-1216 Vendor: Fitnesse Product: Wiki Affected version: v20131110 and earlier Fixed version: N/A Reported by: Jerzy Kramarz Details: The Fitnesse wiki does not validate the syntax of edited pages to validate whether the...