• info
• discussion
• exploit
• solution
• references

TWiki CGI Session File Code Execution Vulnerability

TWiki is prone to a code-exeuction vulnerability.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Versions 4.0.0 to 4.1.0 and all versions using 'SessionPlugin' are vulnerable.