TWiki allows arbitrary shell command execution via the Include function
References
Link | Resource |
---|---|
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=330733 | Mailing List Third Party Advisory |
https://security-tracker.debian.org/tracker/CVE-2005-3056 | Third Party Advisory |
https://twiki.org/cgi-bin/view/Codev/SecurityAlertExecuteCommandsWithInclude | Patch Vendor Advisory |
Configurations
History
No history.
Information
Published : 2019-11-01 13:15
Updated : 2019-11-05 14:33
NVD link : CVE-2005-3056
Mitre link : CVE-2005-3056
CVE.ORG link : CVE-2005-3056
JSON object : View
Products Affected
twiki
- twiki
CWE
CWE-74
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')