Exploitation Summary
EIP tracks 2 public exploits for CVE-2012-6330.
PoCs published by Metasploit, Brian Carlson, juan vazquez, including Metasploit module exploits/unix/webapp/foswiki_maketext.
AI-analyzed exploit summary This Metasploit module exploits a command injection vulnerability in Foswiki's MAKETEXT variable, which passes unsanitized input to Perl's eval function. It allows remote command execution on vulnerable Foswiki installations with localization enabled.
Description
The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6, allows remote attackers to cause a denial of service (memory consumption) via a large integer in a %MAKETEXT% macro.
Exploits (2)
This Metasploit module exploits a command injection vulnerability in Foswiki's MAKETEXT variable, which passes unsanitized input to Perl's eval function. It allows remote command execution on vulnerable Foswiki installations with localization enabled.
This Metasploit module exploits CVE-2012-6330, a command injection vulnerability in Foswiki's MAKETEXT variable due to unsanitized input passed to Perl's eval function. It allows remote command execution on vulnerable Foswiki installations with localization enabled.