EDB-642

functional

TWiki 20030201 - 'search.pm' Remote Command Execution

view exploit source exploit_dbverifiedtype webappsauthor RoMaNSoFtpublished 2004-11-20catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2004-1037UShigh10.0Exploit
The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan