TWiki 5.1

CPE Details

TWiki 5.1
twiki
twiki
5.1
2019-07-01
15h47 +00:00
2019-07-01
15h47 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:twiki:twiki:5.1:*:*:*:*:*:*:*

Informations

Vendor

twiki

Product

twiki

Version

5.1

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2013-1751 2019-11-07 20h51 +00:00 TWiki before 5.1.4 allows remote attackers to execute arbitrary shell commands by sending a crafted '%MAKETEXT{}%' parameter value containing Perl backtick characters.
9.8
Critical
CVE-2014-7237 2014-10-15 22h00 +00:00 lib/TWiki/Sandbox.pm in TWiki 6.0.0 and earlier, when running on Windows, allows remote attackers to bypass intended access restrictions and upload files with restricted names via a null byte (%00) in a filename to bin/upload.cgi, as demonstrated using .htaccess to execute arbitrary code.
6.8
CVE-2012-6330 2013-01-04 20h00 +00:00 The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6, allows remote attackers to cause a denial of service (memory consumption) via a large integer in a %MAKETEXT% macro.
5