CVE-2004-1037
TWiki 20030201 - Remote Code Execution via Search Function Shell Metacharacters
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2004-1037.
PoCs published by Metasploit, RoMaNSoFt, jduck, including Metasploit module exploits/unix/webapp/twiki_search.
AI-analyzed exploit summary This Metasploit module exploits a command injection vulnerability in TWiki's search function (CVE-2004-1037) by injecting shell metacharacters into the 'search' parameter of the WebSearch script, allowing arbitrary command execution.
Description
The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string.
Exploits (3)
This Metasploit module exploits a command injection vulnerability in TWiki's search function (CVE-2004-1037) by injecting shell metacharacters into the 'search' parameter of the WebSearch script, allowing arbitrary command execution.
This Perl script exploits a command injection vulnerability in TWiki's search functionality (CVE-2004-1037) to achieve remote code execution. It supports both GET and POST methods, proxy configurations, and can create a PHP shell or provide a pseudo-interactive shell.
This Metasploit module exploits a command injection vulnerability in TWiki's search function by injecting shell metacharacters into the 'search' parameter of the WebSearch script, allowing arbitrary command execution.