TWiki debugenableplugins RCE (CVE-2014-7236)

Exploits CVE-2014-7236 Perl injection via debugenableplugins on /view/Main/WebHome. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """TWiki debugenableplugins Perl RCE CVE-2014-7236 — execute session.""" from future import annotations import re from urllib.parse...

TWiki - debugenableplugins RCE Detection (CVE-2014-7236)

Detects CVE-2014-7236 by injecting Perl systemid via debugenableplugins on /view/Main/WebHome. !/usr/bin/env python3 -- coding: utf-8 -- """TWiki debugenableplugins RCE CVE-2014-7236.""" import re from urllib.parse import quote from kittysploit import from lib.protocols.http.httpclient import...

CVE-2014-7236: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to do/view/Main/WebHome...

PT-2020-7732

Name of the Vulnerable Software and Affected Versions TWiki versions prior to 6.0.1 Description The issue allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to the API endpoint "do/view/Main/WebHome". Recommendations For versions prior to 6.0.1, update to...

TWiki debugenableplugins RCE

Remote code execution vulnerability in TWiki debugenableplugins Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...