CVE-2012-6330
Foswiki MAKETEXT Remote Command Execution
Title source: metasploitDescription
The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6, allows remote attackers to cause a denial of service (memory consumption) via a large integer in a %MAKETEXT% macro.
Exploits (2)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubyremoteunix
https://www.exploit-db.com/exploits/23580
metasploit
WORKING POC
EXCELLENT
by Brian Carlson, juan vazquez · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/foswiki_maketext.rb
Scores
EPSS
0.7325
EPSS Percentile
98.8%
Details
CWE
CWE-189
Status
published
Products (16)
foswiki/foswiki
1.0.0
foswiki/foswiki
1.0.1
foswiki/foswiki
1.0.2
foswiki/foswiki
1.0.3
foswiki/foswiki
1.0.4
foswiki/foswiki
1.0.10
foswiki/foswiki
1.1.0
foswiki/foswiki
1.1.1
foswiki/foswiki
1.1.2
foswiki/foswiki
1.1.3
... and 6 more
Published
Jan 04, 2013
Tracked Since
Feb 18, 2026