CVE-2005-2877

This Metasploit module exploits a command injection vulnerability in TWiki's history component by manipulating the 'rev' parameter in the TWikiUsers script to execute arbitrary OS commands.

This exploit leverages a command injection vulnerability in TWiki's TWikiUsers script by using the backtick shell metacharacter in the rev parameter to execute arbitrary commands. The provided example demonstrates reading /etc/passwd, but it can be adapted for remote code execution.

The exploit leverages a command injection vulnerability in TWiki's TWikiUsers script via the 'rev' parameter. The backtick shell metacharacter allows arbitrary command execution, demonstrated by injecting 'less /etc/passwd'.

This Metasploit module exploits a command injection vulnerability in TWiki's history component by manipulating the 'rev' parameter in the TWikiUsers script. It allows arbitrary OS command execution in the context of the web server.