Family: CGI abuses --> Category: infos
TWiki filename Parameter Directory Traversal Vulnerability Vulnerability Scan
Vulnerability Scan Summary
Tries to read a local file with TWiki
Detailed Explanation for this Vulnerability Test
The remote web server contains a Perl script that is prone to a
directory traversal attack.
The version of TWiki on the remote host allows directory traversal
sequences in the 'filename' parameter in the 'viewfile' function of
'lib/TWiki/UI/View.pm'. An unauthenticated attacker can leverage this
flaw to view arbitrary files on the remote host subject to the
rights of the web server user id.
See also :
Apply Hotfix 3 for TWiki-4.0.4.
Low / CVSS Base Score : 2
Click HERE for more information and discussions on this network vulnerability scan.