1 matches found
TWiki MAKETEXT Remote Command Execution
This module exploits a vulnerability in the MAKETEXT Twiki variable. By using a specially crafted MAKETEXT, a malicious user can execute shell commands since user input is passed to the Perl "eval" command without first being sanitized. The problem is caused by an underlying security issue in the...
7.5CVSS7.3AI score0.63488EPSS
SaveExploits13
20