Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2004-1037
HistoryMar 01, 2005 - 5:00 a.m.

CVE-2004-1037

2005-03-0105:00:00
[email protected]
web.nvd.nist.gov
4

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

0.914

Percentile

98.9%

JSON

The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string.

Affected configurations

Nvd
Node
twikitwikiMatch2003-02-01
Node
gentoolinux
VendorProductVersionCPE
twikitwiki2003-02-01cpe:2.3:a:twiki:twiki:2003-02-01:*:*:*:*:*:*:*
gentoolinux*cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*

Related

saint 4
openvas 4
nessus 3
exploitdb 2
ubuntucve 1
cve 1
cvelist 1
packetstorm 1
securityvulns 1
gentoo 1
freebsd 1
metasploit 1
saint
saint
TWiki Search.pm shell command injection
2006-04-06 00:00:00
TWiki Search.pm shell command injection
2006-04-06 00:00:00
TWiki Search.pm shell command injection
2006-04-06 00:00:00
openvas
openvas
FreeBSD Ports: twiki
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200411-33 (www-apps/twiki)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200411-33 (www-apps/twiki)
2008-09-24 00:00:00
nessus
nessus
FreeBSD : twiki -- arbitrary shell command execution (b4af3ede-36e9-11d9-a9e7-0001020eed82)
2009-04-23 00:00:00
FreeBSD : twiki -- arbitrary shell command execution (196)
2004-11-23 00:00:00
GLSA-200411-33 : TWiki: Arbitrary command execution
2004-11-24 00:00:00
exploitdb
exploitdb
TWiki - Search Function Arbitrary Command Execution (Metasploit)
2010-07-03 00:00:00
TWiki 20030201 - 'search.pm' Remote Command Execution
2004-11-20 00:00:00
ubuntucve
ubuntucve
CVE-2004-1037
2005-03-01 00:00:00
cve
cve
CVE-2004-1037
2005-03-01 05:00:00
cvelist
cvelist
CVE-2004-1037
2004-11-19 05:00:00
packetstorm
packetstorm
TWiki Search Function Arbitrary Command Execution
2010-02-23 00:00:00
securityvulns
securityvulns
[Full-Disclosure] [ GLSA 200411-33 ] TWiki: Arbitrary command execution
2004-11-24 00:00:00
gentoo
gentoo
TWiki: Arbitrary command execution
2004-11-24 00:00:00
freebsd
freebsd
twiki -- arbitrary shell command execution
2004-11-12 00:00:00
metasploit
metasploit
TWiki Search Function Arbitrary Command Execution
2010-02-21 20:31:09

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

0.914

Percentile

98.9%

JSON
Related for NVD:CVE-2004-1037
saint4openvas4nessus3exploitdb2ubuntucve1cve1cvelist1packetstorm1securityvulns1gentoo1freebsd1metasploit1