CVE-2005-2877
TWiki 02-Sep-2004 and earlier - Remote Code Execution via Rev Parameter Shell Metacharacter Injection
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2005-2877.
PoCs published by Metasploit, JChristophFuchs, B4dP4nd4, including Metasploit module exploits/unix/webapp/twiki_history.
AI-analyzed exploit summary This Metasploit module exploits a command injection vulnerability in TWiki's history component by manipulating the 'rev' parameter in the TWikiUsers script to execute arbitrary OS commands.
Description
The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers.
Exploits (4)
This Metasploit module exploits a command injection vulnerability in TWiki's history component by manipulating the 'rev' parameter in the TWikiUsers script to execute arbitrary OS commands.
This exploit leverages a command injection vulnerability in TWiki's TWikiUsers script by using the backtick shell metacharacter in the rev parameter to execute arbitrary commands. The provided example demonstrates reading /etc/passwd, but it can be adapted for remote code execution.
The exploit leverages a command injection vulnerability in TWiki's TWikiUsers script via the 'rev' parameter. The backtick shell metacharacter allows arbitrary command execution, demonstrated by injecting 'less /etc/passwd'.
This Metasploit module exploits a command injection vulnerability in TWiki's history component by manipulating the 'rev' parameter in the TWikiUsers script. It allows arbitrary OS command execution in the context of the web server.