TW
Vendor
Twiki
30
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2014-7236 | TW Twiki Twiki | 9.1 | Feb 17 | Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to… |
| CVE-2013-1751 | TW Twiki Twiki | 9.8 | Nov 7 | TWiki before 5.1.4 allows remote attackers to execute arbitrary shell commands by sending a crafted '%MAKETEXT{}%' parameter value containing Perl backtick characters |
| CVE-2005-3056 | TW Twiki Twiki | 9.8 | Nov 1 | TWiki allows arbitrary shell command execution via the Include function |
| CVE-2018-20212 | TW Twiki Twiki | 6.1 | Mar 17 | bin/statistics in TWiki 6.0.2 allows cross-site scripting (XSS) via the webs parameter |
| CVE-2014-9367 | TW Twiki Twiki | – | Dec 31 | Incomplete blacklist vulnerability in the urlEncode function in lib/TWiki.pm in TWiki 6.0.0 and 6.0.1 allows remote attackers to conduct cross-site scripting (XSS) attacks via a… |
| CVE-2014-9325 | TW Twiki Twiki | – | Dec 31 | Multiple cross-site scripting (XSS) vulnerabilities in TWiki 6.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) QUERYSTRING variable in lib/TWiki.pm… |
| CVE-2014-7237 | TW Twiki Twiki | – | Oct 16 | lib/TWiki/Sandbox.pm in TWiki 6.0.0 and earlier, when running on Windows, allows remote attackers to bypass intended access restrictions and upload files with restricted names via… |
| CVE-2012-6330 | TW Twiki Twiki | – | Jan 4 | The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6, allows remote attackers to cause a denial of service (memory… |
| CVE-2012-0979 | TW Twiki Twiki | – | Feb 2 | Cross-site scripting (XSS) vulnerability in TWiki allows remote attackers to inject arbitrary web script or HTML via the organization field in a profile, involving (1)… |
| CVE-2011-3010 | TW Twiki Twiki | – | Sep 30 | Multiple cross-site scripting (XSS) vulnerabilities in TWiki before 5.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the newtopic parameter in a… |
| CVE-2011-1838 | TW Twiki Twiki | – | May 20 | Multiple cross-site scripting (XSS) vulnerabilities in TemplateLogin.pm in TWiki before 5.0.2 allow remote attackers to inject arbitrary web script or HTML via the origurl… |
| CVE-2010-3841 | TW Twiki Twiki | – | Oct 18 | Multiple cross-site scripting (XSS) vulnerabilities in lib/TWiki.pm in TWiki before 5.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the rev parameter… |
| CVE-2009-4898 | TW Twiki Twiki | – | Sep 7 | Cross-site request forgery (CSRF) vulnerability in TWiki before 4.3.2 allows remote attackers to hijack the authentication of arbitrary users for requests that update pages, as… |
| CVE-2009-1339 | TW Twiki Twiki | – | Apr 30 | Cross-site request forgery (CSRF) vulnerability in TWiki before 4.3.1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that update… |
| CVE-2008-5305 | TW Twiki Twiki | – | Dec 10 | Eval injection vulnerability in TWiki before 4.2.4 allows remote attackers to execute arbitrary Perl code via the %SEARCH{}% variable |
| CVE-2008-5304 | TW Twiki Twiki | – | Dec 10 | Cross-site scripting (XSS) vulnerability in TWiki before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via the %URLPARAM{}% variable |
| CVE-2008-4998 | TW Twiki Twiki | – | Nov 7 | postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/twiki temporary file |
| CVE-2008-3195 | TW Twiki Twiki | – | Sep 18 | Directory traversal vulnerability in bin/configure in TWiki before 4.2.3, when a certain step in the installation guide is skipped, allows remote attackers to read arbitrary files… |
| CVE-2007-5193 | TW Twiki Twiki | – | Oct 4 | The default configuration for twiki 4.1.2 on Debian GNU/Linux, and possibly other operating systems, specifies the work area directory (cfg{RCS}{WorkAreaDir}) under the web… |
| CVE-2007-0669 | TW Twiki Twiki | – | Feb 8 | Unspecified vulnerability in Twiki 4.0.0 through 4.1.0 allows local users to execute arbitrary Perl code via unknown vectors related to CGI session files |
| CVE-2006-6071 | TW Twiki Twiki | – | Dec 2 | TWiki 4.0.5 and earlier, when running under Apache 1.3 using ApacheLogin with sessions and "ErrorDocument 401" redirects to a valid wiki topic, does not properly handle failed… |
| CVE-2006-4294 | TW Twiki Twiki | – | Sep 9 | Directory traversal vulnerability in viewfile in TWiki 4.0.0 through 4.0.4 allows remote attackers to read arbitrary files via a |
| CVE-2006-3819 | TW Twiki Twiki | – | Jul 27 | Eval injection vulnerability in the configure script in TWiki 4.0.0 through 4.0.4 allows remote attackers to execute arbitrary Perl code via an HTTP POST request containing a… |
| CVE-2006-3336 | TW Twiki Twiki | – | Jul 5 | TWiki 01-Dec-2000 up to 4.0.3 allows remote attackers to bypass the upload filter and execute arbitrary code via filenames with double extensions such as ".php.en", ".php.1", and… |
| CVE-2006-2942 | TW Twiki Twiki | – | Jun 20 | TWiki 4.0.0, 4.0.1, and 4.0.2 allows remote attackers to gain Twiki administrator privileges via a TWiki.TWikiRegistration form with a modified action attribute that references… |
| CVE-2006-1386 | TW Twiki Twiki | – | Mar 26 | The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings, which allows remote attackers to read restricted areas and access restricted content… |
| CVE-2006-1387 | TW Twiki Twiki | – | Mar 26 | TWiki 4.0, 4.0.1, and 20010901 through 20040904 allows remote authenticated users with edit rights to cause a denial of service (infinite recursion leading to CPU and memory… |
| CVE-2005-2877 | TW Twiki Twiki | – | Sep 16 | The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev… |
| CVE-2004-1037 | TW Twiki Twiki | – | Mar 1 | The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string |
| CVE-2005-0516 | IM Imagegalleryplugin Twiki | – | Feb 23 | The ImageGalleryPlugin (ImageGalleryPlugin.pm) in Twiki allows remote attackers to execute arbitrary commands via certain commands that generate thumbnails |