virus logo Intrusion Prevention

TWiki.Rev.Parameter.Shell.Command.Injection

description-logoDescription

It indicates a possible exploit of shell command injection vulnerability in TWiki.
The revision control function of the TWikiUsers script uses the backtick shell metacharacter to construct a command line. An attacker may use a specially crafted URI to execute arbitrary commands through the shell.

affected-products-logoAffected Products

TWiki TWiki 20040902
TWiki TWiki 20040901
TWiki TWiki 20030201
TWiki TWiki 01-Dec-2001

Impact logoImpact

Execute arbitrary code

recomended-action-logoRecommended Actions

Apply the latest patch available from the TWiki Web site.
http://twiki.org/

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)
ID 13522
Created Oct 20, 2006
Updated Nov 15, 2021
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon
CVE ID CVE-2005-2877
Exploit Prediction Score 96.82%
Default Action drop
Active
Affected OS Windows, Linux, Solaris, Other
Affected App Other