TWiki is prone to remote code-execution vulnerability.

Attackers can exploit this issue to execute arbitrary code in the context of the webserver user.

Updates are available.

It is possible to execute arbitrary Perl code by adding a 'debugenableplugins=' parameter with a specially crafted value.

TWiki 6.0.0 TWiki 5.1.0 through TWiki 5.1.4 TWiki 5.0.0 through TWiki 5.0.2 TWiki 4.3.0 through TWiki 4.3.2 TWiki 4.2.0 through TWiki 4.2.4 TWiki 4.1.0 through TWiki 4.1.2 TWiki 4.0.0 through TWiki 4.0.5

Send a HTTP GET request and check the response.

• http://twiki.org/
• http://www.securityfocus.com/bid/70372

---

Updated on 2015-03-25