CVE-2018-20212

Description

References

• packetstormsecurity.com/files/151028/TWiki-6.0.2-Cross-Site-Scripting.html · Third Party Advisory
• seclists.org/fulldisclosure/2019/Jan/7 · Mailing List
• twiki.org/cgi-bin/view/Codev/DownloadTWiki · Product

Mais vulnerabilidades de twiki

• CVE-2014-7236CRÍTICO 9.1Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the de…
• CVE-2013-1751CRÍTICO 9.8TWiki before 5.1.4 allows remote attackers to execute arbitrary shell commands by sending a crafted '%MAKETEXT{}%' parameter value containin…
• CVE-2005-3056CRÍTICO 9.8TWiki allows arbitrary shell command execution via the Include function
• CVE-2014-9367MÉDIO 4.3Incomplete blacklist vulnerability in the urlEncode function in lib/TWiki.pm in TWiki 6.0.0 and 6.0.1 allows remote attackers to conduct cro…
• CVE-2014-9325MÉDIO 4.3Multiple cross-site scripting (XSS) vulnerabilities in TWiki 6.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1)…