- Home
- CVEs with nessus.description==Hans Ulrich Niedermann reports :
The TWiki search function uses a user-supplied search string to compose a command line executed by the Perl backtick (``) operator.
The search string is not checked properly for shell metacharacters and is thus vulnerable to search string containing quotes and shell commands.
IMPACT: An attacker is able to execute arbitrary shell commands with the privileges of the TWiki process.
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top