CVE-2008-5305 Eval injection vulnerability in TWiki before 4.2.4 allows remote attackers to execute arbitrary Perl code via the %SEARCH{}% variable.
HighCVSS 10.0
EPSS 4.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Eval injection vulnerability in TWiki before 4.2.4 allows remote attackers to execute arbitrary Perl code via the %SEARCH{}% variable.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| twiki | <= 4.2.3 | No fix listed |
| twiki | = 4.0.0 | No fix listed |
| twiki | = 4.0.1 | No fix listed |
| twiki | = 4.0.2 | No fix listed |
| twiki | = 4.0.3 | No fix listed |
| twiki | = 4.0.4 | No fix listed |
| twiki | = 4.0.5 | No fix listed |
| twiki | = 4.1.0 | No fix listed |
| twiki | = 4.1.1 | No fix listed |
| twiki | = 4.1.2 | No fix listed |
| twiki | = 4.2.0 | No fix listed |
| twiki | = 4.2.1 | No fix listed |
| twiki | = 4.2.2 | No fix listed |
References
- 33040 third-party-advisory vendor-advisory
- 1021352 vdb-entry
- twiki.org vendor-advisory
- 32668 vdb-entry
- ADV-2008-3381 vdb-entry