TWiki 6.0

CPE Details

TWiki 6.0
twiki
twiki
6.0
2019-07-01
15h47 +00:00
2019-07-01
15h47 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:twiki:twiki:6.0:*:*:*:*:*:*:*

Informations

Vendor

twiki

Product

twiki

Version

6.0

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2014-7236 2020-02-17 20h14 +00:00 Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to do/view/Main/WebHome.
9.1
Critique
CVE-2014-7237 2014-10-15 22h00 +00:00 lib/TWiki/Sandbox.pm in TWiki 6.0.0 and earlier, when running on Windows, allows remote attackers to bypass intended access restrictions and upload files with restricted names via a null byte (%00) in a filename to bin/upload.cgi, as demonstrated using .htaccess to execute arbitrary code.
6.8