Unscored severity · published Feb 8, 2007
CVE-2007-0669
Unspecified vulnerability in Twiki 4.0.0 through 4.1.0 allows local users to execute arbitrary Perl code via unknown vectors related to CGI session files
–
CVSS
0.4%
EPSS
No
On KEV
Description
Unspecified vulnerability in Twiki 4.0.0 through 4.1.0 allows local users to execute arbitrary Perl code via unknown vectors related to CGI session files.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TW
Twiki · Twiki
4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0669
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0669
archives.neohapsis.com
http://archives.neohapsis.com/archives/vulnwatch/2007-q1/0033.html
osvdb.org
http://osvdb.org/33168
secunia.com
http://secunia.com/advisories/24091
Vendor Advisory
http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2007-0669
Patch
http://www.kb.cert.org/vuls/id/584436
www.openpkg.com
http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.009.html
More from Twiki
9.8
CVE-2013-1751
TWiki before 5.1.4 allows remote attackers to execute arbitrary shell commands by sending a crafted '%MAKETEXT{}%' parameter value containing Perl backtick characters
9.8
CVE-2005-3056
TWiki allows arbitrary shell command execution via the Include function
9.1
CVE-2014-7236
Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to…
6.1
CVE-2018-20212
bin/statistics in TWiki 6.0.2 allows cross-site scripting (XSS) via the webs parameter
–
CVE-2014-9367
Incomplete blacklist vulnerability in the urlEncode function in lib/TWiki.pm in TWiki 6.0.0 and 6.0.1 allows remote attackers to conduct cross-site scripting (XSS) attacks via a…