CVE-2012-6495
MoinMoin < 1.9.6 - Authenticated Path Traversal and Arbitrary File Write via Twikidraw and Anywikidraw Actions
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-6495. PoCs published by Metasploit, HTP.
AI-analyzed exploit summary This Metasploit module exploits a directory traversal vulnerability in MoinMoin 1.9.5 to upload arbitrary files via the twikidraw action, allowing remote code execution by overwriting the moin.wsgi file. It includes authentication handling and attempts to restore the original file post-exploitation.
Description
Multiple directory traversal vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to overwrite arbitrary files via unspecified vectors. NOTE: this can be leveraged with CVE-2012-6081 to execute arbitrary code.
Exploits (2)
This Metasploit module exploits a directory traversal vulnerability in MoinMoin 1.9.5 to upload arbitrary files via the twikidraw action, allowing remote code execution by overwriting the moin.wsgi file. It includes authentication handling and attempts to restore the original file post-exploitation.
This Python script exploits CVE-2012-6081, a remote code execution vulnerability in MoinMoin wiki software. It allows an attacker to upload a malicious file to the WikiSandBox page, enabling either a stealth webshell or a backconnect shell depending on the chosen method.