• info
• discussion
• exploit
• solution
• references

TWiki CGI Session File Code Execution Vulnerability

To exploit this issue an attacker requires write access to the '/tmp' directory of the vulnerable webserver.