CVE-2014-9325

Mô tả

Tham khảo

• packetstormsecurity.com/files/129654/TWiki-6.0.1-QUERYSTRING-QUERYPARAMSTRING-XSS.html · Exploit
• seclists.org/fulldisclosure/2014/Dec/81 · Exploit
• twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2014-9325 · Vendor Advisory
• securitytracker.com/id/1031399 · Exploit

Lỗ hổng khác của twiki

• CVE-2014-7236NGHIÊM TRỌNG 9.1Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the de…
• CVE-2013-1751NGHIÊM TRỌNG 9.8TWiki before 5.1.4 allows remote attackers to execute arbitrary shell commands by sending a crafted '%MAKETEXT{}%' parameter value containin…
• CVE-2005-3056NGHIÊM TRỌNG 9.8TWiki allows arbitrary shell command execution via the Include function
• CVE-2018-20212TRUNG BÌNH 6.1bin/statistics in TWiki 6.0.2 allows cross-site scripting (XSS) via the webs parameter.
• CVE-2014-9367TRUNG BÌNH 4.3Incomplete blacklist vulnerability in the urlEncode function in lib/TWiki.pm in TWiki 6.0.0 and 6.0.1 allows remote attackers to conduct cro…