CVE-2013-1666

Foswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro...

Code injection

Foswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro...

CVE-2013-1666

Foswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro...

CVE-2013-1666

Affected product: Foswiki versions before 1.1.8. The vulnerability is in the MAKETEXT macro, enabling code injection that can lead to arbitrary code execution on the server (per the Foswiki advisory). Attack surface includes crafting MAKETEXT macro invocations on wiki pages when localization is e...

Foswiki 1.0.x < 1.0.11 / 1.1.x < 1.1.7 DoS Vulnerability

Foswiki is prone to a denial of service DoS vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

Foswiki 1.0.x < 1.0.5 CSRF Vulnerability

Foswiki is prone to a cross-site request forgery CSRF vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Foswiki 1.x < 1.1.5 Multiple XSS Vulnerabilities

Foswiki is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Foswiki 1.1.0 - 1.1.1 Topic Settings Remote Privilege Escalation Vulnerability

Foswiki is prone to a remote privilege escalation vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Foswiki Topic Settings Remote Privilege Escalation Vulnerability

Foswiki is prone to a remote privilege escalation vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:foswiki:foswiki"...

Oracle Solaris Third-Party Patch Update : perl-512 (cve_2012_5195_heap_buffer)

The remote Solaris system is missing necessary patches to address security updates : - Heap-based buffer overflow in the Perlrepeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3, and 5.15.x before 15.15.5 allows context-dependent attackers to cause a denial of service...

Oracle Solaris Third-Party Patch Update : perl-58 (cve_2012_6329_code_injection1)

The remote Solaris system is missing necessary patches to address security updates : - The compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, whi...

Foswiki MAKETEXT Remote Command Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

perl: possible arbitrary code execution via Locale::Maketext

The compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input t...

Foswiki Detection

The remote host is running Foswiki, an open source wiki system written in Perl. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65058; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"Foswiki Detection";...

Foswiki < 1.1.8 MAKETEXT Macro Arbitrary Code Injection

According to its version number, the instance of Foswiki installed on the remote host is affected by a code injection vulnerability in the '%MAKETEXT%' macro. An incomplete fix to CVE-2012-6329 left this attack vector available in which an attacker can invoke arbitrary Perl modules by escaping...

Foswiki Security: Alert CVE-2013-1666 - Remote Code Execution Vulnerability in MAKETEXT macro.

---+ Security Alert: Code injection vulnerability in MAKETEXT macro This advisory alerts you of a potential security issue with your Foswiki installation. A vulnerability has been reported against the core Perl module CPAN:Locale::Maketext 1, which Foswiki uses to provide translations when...

Foswiki MAKETEXT 1.1.7 / 1.0.10 Code Execution Vulnerability

This advisory alerts you of a potential security issue with your Foswiki installation. A vulnerability has been reported against the core Perl module CPAN:Locale::Maketext, which Foswiki uses to provide translations when UserInterfaceInternationalization is enabled in the configuration. Because o...

Foswiki 1.1.5 RCE

Remote code execution vulnerability in Foswiki Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

CVE-2012-6329

The compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input t...

CVE-2012-6330

The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6, allows remote attackers to cause a denial of service memory consumption via a large integer in a %MAKETEXT% macro...