Twiki vulnerabilities

Products

• Twiki 29

Newest

• twiki Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote... CVE-2014-7236 Public exploit EPSS 55.6% 9.1 CriticalFebruary 17, 2020
• twiki TWiki before 5.1.4 allows remote attackers to execute arbitrary shell commands by sending a... CVE-2013-1751 9.8 CriticalNovember 7, 2019
• twiki TWiki allows arbitrary shell command execution via the Include function CVE-2005-3056 9.8 CriticalNovember 1, 2019
• twiki bin/statistics in TWiki 6.0.2 allows cross-site scripting (XSS) via the webs parameter. CVE-2018-20212 6.1 MediumMarch 17, 2019
• twiki Incomplete blacklist vulnerability in the urlEncode function in lib/TWiki.pm in TWiki 6.0.0 and 6... CVE-2014-9367 4.3 MediumDecember 31, 2014
• twiki Multiple cross-site scripting (XSS) vulnerabilities in TWiki 6.0.1 allow remote attackers to... CVE-2014-9325 4.3 MediumDecember 31, 2014
• microsoft windows, twiki +1 more lib/TWiki/Sandbox.pm in TWiki 6.0.0 and earlier, when running on Windows, allows remote attackers... CVE-2014-7237 EPSS 20.1% 6.8 MediumOctober 16, 2014
• foswiki, twiki +1 more The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x... CVE-2012-6330 Public exploit EPSS 35.7% 5.0 MediumJanuary 4, 2013
• twiki Cross-site scripting (XSS) vulnerability in TWiki allows remote attackers to inject arbitrary web... CVE-2012-0979 4.3 MediumFebruary 2, 2012
• twiki Multiple cross-site scripting (XSS) vulnerabilities in TWiki before 5.1.0 allow remote attackers... CVE-2011-3010 Public exploit 4.3 MediumSeptember 30, 2011
• twiki Multiple cross-site scripting (XSS) vulnerabilities in TemplateLogin.pm in TWiki before 5.0.2... CVE-2011-1838 Public exploit 4.3 MediumMay 20, 2011
• twiki Multiple cross-site scripting (XSS) vulnerabilities in lib/TWiki.pm in TWiki before 5.0.1 allow... CVE-2010-3841 Public exploit 4.3 MediumOctober 18, 2010
• twiki Cross-site request forgery (CSRF) vulnerability in TWiki before 4.3.2 allows remote attackers to... CVE-2009-4898 6.8 MediumSeptember 7, 2010
• twiki Cross-site request forgery (CSRF) vulnerability in TWiki before 4.3.1 allows remote authenticated... CVE-2009-1339 6.0 MediumApril 30, 2009
• twiki Eval injection vulnerability in TWiki before 4.2.4 allows remote attackers to execute arbitrary... CVE-2008-5305 Public exploit 10.0 HighDecember 10, 2008
• twiki Cross-site scripting (XSS) vulnerability in TWiki before 4.2.4 allows remote attackers to inject... CVE-2008-5304 Public exploit 4.3 MediumDecember 10, 2008
• twiki ** DISPUTED ** postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a... CVE-2008-4998 Disputed 6.9 MediumNovember 7, 2008
• twiki Directory traversal vulnerability in bin/configure in TWiki before 4.2.3, when a certain step in... CVE-2008-3195 Public exploitFix available 6.8 MediumSeptember 17, 2008
• twiki The default configuration for twiki 4.1.2 on Debian GNU/Linux, and possibly other operating... CVE-2007-5193 5.0 MediumOctober 4, 2007
• twiki Unspecified vulnerability in Twiki 4.0.0 through 4.1.0 allows local users to execute arbitrary... CVE-2007-0669 4.6 MediumFebruary 8, 2007
• twiki TWiki 4.0.5 and earlier, when running under Apache 1.3 using ApacheLogin with sessions and ... CVE-2006-6071 9.0 HighDecember 2, 2006
• twiki Directory traversal vulnerability in viewfile in TWiki 4.0.0 through 4.0.4 allows remote... CVE-2006-4294 Public exploit 5.0 MediumSeptember 9, 2006
• twiki Eval injection vulnerability in the configure script in TWiki 4.0.0 through 4.0.4 allows remote... CVE-2006-3819 Public exploit 7.5 HighJuly 27, 2006
• twiki TWiki 01-Dec-2000 up to 4.0.3 allows remote attackers to bypass the upload filter and execute... CVE-2006-3336 4.0 MediumJuly 5, 2006
• twiki TWiki 4.0.0, 4.0.1, and 4.0.2 allows remote attackers to gain Twiki administrator privileges via... CVE-2006-2942 5.1 MediumJune 20, 2006
• twiki TWiki 4.0, 4.0.1, and 20010901 through 20040904 allows remote authenticated users with edit... CVE-2006-1387 4.0 MediumMarch 26, 2006
• twiki The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings,... CVE-2006-1386 7.5 HighMarch 26, 2006
• twiki The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers... CVE-2005-2877 Public exploit EPSS 70.9% 7.5 HighSeptember 16, 2005
• twiki imagegalleryplugin The ImageGalleryPlugin (ImageGalleryPlugin.pm) in Twiki allows remote attackers to execute... CVE-2005-0516 7.5 HighFebruary 23, 2005
• twiki, gentoo linux +1 more The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via... CVE-2004-1037 Public exploit EPSS 61.7% 10.0 HighNovember 19, 2004