CVE-2005-2877
The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers...
The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers.
Exploit likelihood
What each source reports
NVD Score used
The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers.
- Record
CVE-2005-2877- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers.
- Record
CVE-2005-2877- Updated
- 2026-11-02
EUVDEUVD-2005-2877 No score
The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers.
- Record
EUVD-2005-2877- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gwgr-jhxj-6vjp No score
The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers...
The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers.
- Record
GHSA-gwgr-jhxj-6vjp- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | TWiki History TWikiUsers - 'rev' Command Execution (Metasploit) | 2010-07-03 |
| Exploit-DB | TWiki TWikiUsers - Arbitrary Command Execution | 2005-09-14 |
| Exploit-DB | TWiki TWikiUsers - INCLUDE Function Arbitrary Command Execution | 2005-09-28 |
| Metasploit | TWiki History Function Arbitrary Command Execution | 2005-09-14 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-2877 is a high vulnerability (CVSS 7.5) in Twiki, published September 16, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 70.9%, the 99th percentile. No source names a fixed version.