CVE-2012-6081

Related Files

Gentoo Linux Security Advisory 201309-14

Posted Sep 24, 2013

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201309-14 - Multiple vulnerabilities have been reported in MoinMoin, the worst of which may allow execution of arbitrary code. Versions less than 1.9.6 are affected.

tags | advisory, arbitrary, vulnerability

systems | linux, gentoo

advisories | CVE-2012-6080, CVE-2012-6081, CVE-2012-6082, CVE-2012-6495

SHA-256 | 6a08d9bee44e6479fda1f205ce909241ff0aff3b3633609ae564bc28978818cf

Download | Favorite | View

MoinMoin twikidraw Action Traversal File Upload

Posted Jun 19, 2013

Authored by juan vazquez, temp66, HTP | Site metasploit.com

This Metasploit module exploits a vulnerability in MoinMoin 1.9.5. The vulnerability exists on the manage of the twikidraw actions, where a traversal path can be used in order to upload arbitrary files. Exploitation is achieved on Apached/mod_wsgi configurations by overwriting moin.wsgi, which allows to execute arbitrary python code, as exploited in the wild on July, 2012.

tags | exploit, arbitrary, python

advisories | CVE-2012-6081, OSVDB-88825

SHA-256 | 357506b05f75972b93ef4f53d7935e38c58ae9d6c3dc89990bc79b7b56e9d911

Download | Favorite | View