338 matches found
CVE-2006-1386
The 1 rdiff and 2 preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings, which allows remote attackers to read restricted areas and access restricted content in TWiki topics...
CVE-2006-1386
The 1 rdiff and 2 preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings, which allows remote attackers to read restricted areas and access restricted content in TWiki topics...
CVE-2006-1387
CVE-2006-1387 affects TWiki 4.0, 4.0.1, and 20010901 through 20040904. The vulnerability allows remote authenticated users with edit rights to cause a denial of service via INCLUDE by URL statements that form a loop (e.g., a page including itself), triggering infinite recursion and consuming CPU ...
CVE-2006-1387
TWiki 4.0, 4.0.1, and 20010901 through 20040904 allows remote authenticated users with edit rights to cause a denial of service infinite recursion leading to CPU and memory consumption via INCLUDE by URL statements that form a loop, such as a page that includes itself...
CVE-2006-1386
The 1 rdiff and 2 preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings, which allows remote attackers to read restricted areas and access restricted content in TWiki topics...
CVE-2006-1386
The CVE-2006-1386 issue affects TWiki 4.0 and 4.0.1, where the rdiff and preview scripts fail to enforce access controls, enabling remote attackers to read restricted TWiki topics. The description specifies the vulnerable components and root cause (access-control bypass in rdiff/preview scripts),...
TWiki 20030201 VIEW string remote command execution
!/usr/bin/perl TWiki 20030201 VIEW string remote command execution vulnerability Exploit coded by runvirus GeekZatWorldDefacersd0tNeT root@localhost perls$ perl twikiview.pl -h www.victim.com -p twiki/bin/view/TWiki/ -c "uname -a;id" -= TWiki :- view string remote command execution exploit =- -=...
TWiki %INCLUDE Parameter Arbitrary Command Injection
According to its banner, the installed version of TWiki allows an attacker to manipulate input to the 'rev' parameter in order to execute arbitrary shell commands on the remote host subject to the privileges of the web server user id. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
TWiki Detection
The remote host is running TWiki, an open source wiki system written in Perl. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid19941; scriptversion"1.20"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24"; scriptnameenglish:"TWiki Detection";...
TWiki TWikiUsers - INCLUDE Function Arbitrary Command Execution
TWiki TWikiUsers - INCLUDE Function Arbitrary Command Execution source: https://www.securityfocus.com/bid/14960/info A remote command execution vulnerability affects the application. The revision control function of the TWikiUsers script uses the backtick shell metacharacter to construct a comman...
TWiki does not properly sanitize URI parameters
Overview A lack of input validation in the TWiki revision control function may allow a remote, unauthenticated attacker to execute arbitrary commands. Description TWiki is a web-based collaborative publishing environment. TWiki does not sanitize user-controlled URI parameters supplied to the...
CVE-2005-2877
The history revision control function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers...
CVE-2005-2877
The history revision control function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers...
CVE-2005-2877
The history revision control function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers...
CVE-2005-2877
CVE-2005-2877 affects TWiki’s revision control function. If the rev parameter in TWikiUsers is not sanitized, remote attackers can inject shell metacharacters to execute arbitrary commands on the server. Public details describe the flaw in TWiki prior to 02-Sep-2004 and indicate the issue stems f...
TWiki Remote Command Execution Vulnerability
This advisory alerts you of a potential security issue with your TWiki installation: The TWiki history function allows arbitrary shell command execution. The permanent place for this advisory is http://twiki.org/cgi-bin/view/Codev/SecurityAlertExecuteCommandsWithRev . Please see updates and...
[SA16820] TWiki "rev" Shell Command Injection Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
Twiki rev Parameter Arbitrary Shell Command Execution
Binary data 3223.prm...
TWiki 'rev' Parameter Arbitrary Command Execution
The version of TWiki running on the remote host allows an attacker to manipulate input to the 'rev' parameter in order to execute arbitrary shell commands on the remote host subject to the privileges of the web server user id. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...