Code injection

TWiki 4.0, 4.0.1, and 20010901 through 20040904 allows remote authenticated users with edit rights to cause a denial of service infinite recursion leading to CPU and memory consumption via INCLUDE by URL statements that form a loop, such as a page that includes itself...

CVE-2006-1387

CVE-2006-1387 affects TWiki 4.0, 4.0.1, and 20010901 through 20040904. The vulnerability allows remote authenticated users with edit rights to cause a denial of service via INCLUDE by URL statements that form a loop (e.g., a page including itself), triggering infinite recursion and consuming CPU ...