EUVD-2010-3820

Malware in sbrugna...

EUVD-2008-5281

Malware in sbrugna...

EUVD-2006-6054

Malware in sbrugna...

EUVD-2014-9150

Malware in sbrugna...

CVE-2011-3010

Multiple cross-site scripting XSS vulnerabilities in TWiki before 5.1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the newtopic parameter in a WebCreateNewTopic action, related to the TWiki.WebCreateNewTopicTemplate topic; or 2 the query string to SlideShow.pm in the...

CVE-2018-20212

bin/statistics in TWiki 6.0.2 allows cross-site scripting XSS via the webs parameter...

CVE-2008-4998

postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/twiki temporary file. NOTE: the vendor disputes this vulnerability, stating "this bug is invalid...

CVE-2009-4898

Cross-site request forgery CSRF vulnerability in TWiki before 4.3.2 allows remote attackers to hijack the authentication of arbitrary users for requests that update pages, as demonstrated by a URL for a save script in the ACTION attribute of a FORM element, in conjunction with a call to the submi...

CVE-2005-3056

TWiki allows arbitrary shell command execution via the Include function...

Fedora: Security Advisory for pandoc (FEDORA-2022-1f981071eb)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2014-7236

Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to do/view/Main/WebHome...

Sql injection

Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to do/view/Main/WebHome...

CVE-2014-7236

CVE-2014-7236 affects TWiki (lib/TWiki/Plugins.pm) prior to 6.0.1. The vulnerability is an eval injection in the debugenableplugins parameter used during do/view/Main/WebHome, enabling remote Perl code execution with the web server user’s privileges. Evidence across sources (CVE entry, NVD/CIRCL/...

CVE-2014-7236

Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to do/view/Main/WebHome...

CVE-2013-1751

TWiki before 5.1.4 allows remote attackers to execute arbitrary shell commands by sending a crafted '%MAKETEXT%' parameter value containing Perl backtick characters...

CVE-2013-1751

The CVE affects TWiki before 5.1.4. A crafted '%MAKETEXT{}%' parameter value containing Perl backtick characters allows remote attackers to execute arbitrary shell commands. The vulnerability is a command-injection in MAKETEXT handling, enabling remote code execution with the web server user priv...

CVE-2013-1751

TWiki before 5.1.4 allows remote attackers to execute arbitrary shell commands by sending a crafted '%MAKETEXT%' parameter value containing Perl backtick characters...

TWiki Injection Vulnerability

TWiki is the U.S. Peter Thoeny software developers of a set of Perl-based open source Wiki program , is a Web-based site collaboration platform , it can be used for project development management , document management , knowledge base management and other collaborative work . There is an injectio...

CVE-2005-3056

TWiki allows arbitrary shell command execution via the Include function...

CVE-2005-3056

TWiki allows arbitrary shell command execution via the Include function...