CVE-2005-2877

Related Files

TWiki History TWikiUsers rev Parameter Command Execution

Posted Feb 23, 2010

Authored by B4dP4nd4 | Site metasploit.com

This Metasploit module exploits a vulnerability in the history component of TWiki. By passing a 'rev' parameter containing shell metacharacters to the TWikiUsers script, an attacker can execute arbitrary OS commands.

tags | exploit, arbitrary, shell

advisories | CVE-2005-2877

SHA-256 | 6015a5f92d65c08ab6a53af23d26272da84f1c51e6957e6ce58905ecb62617c4

Download | Favorite | View

twikivuln.txt

Posted Sep 20, 2005

Authored by B4dP4nd4 | Site twiki.org

TWiki up to and including TWikiRelease02Sep2004 is vulnerable to remote command execution in the revision control function. Detailed exploitation provided.

tags | advisory, remote

advisories | CVE-2005-2877

SHA-256 | 9797cf4d91992f2125ffb97717f9d5e3e96195eef7114adec5ae0ca6caa97df5

Download | Favorite | View