CVE-2004-1037 The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string.
HighCVSS 10.0
EPSS 61.7%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| twiki | = 2003-02-01 | No fix listed |
| gentoo linux | All versions | No fix listed |
References
- 20041116 Re: [Full-Disclosure] TWiki search function allows arbitrary shell command execution mailing-list
- CLA-2005:918 vendor-advisory
- 20041112 TWiki search function allows arbitrary shell command execution mailing-list
- GLSA-200411-33 vendor-advisory
- twiki.org
- P-039 government-resource third-party-advisory
- 11674 exploit patch vdb-entry vendor-advisory
- twik-search-command-execution(18062) vdb-entry