Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-1216. PoCs published by SecPod Research.
AI-analyzed exploit summary This Metasploit module exploits a remote command execution vulnerability in Fitnesse Wiki by injecting malicious commands into a dynamically created wiki page. The exploit leverages the application's page creation and test execution features to achieve RCE.
Description
FitNesse Wiki 20131110, 20140201, and earlier allows remote attackers to execute arbitrary commands by defining a COMMAND_PATTERN and TEST_RUNNER in the pageContent parameter when editing a page.
Exploits (1)
This Metasploit module exploits a remote command execution vulnerability in Fitnesse Wiki by injecting malicious commands into a dynamically created wiki page. The exploit leverages the application's page creation and test execution features to achieve RCE.