CVE-2014-7236 PoC — TWiki 注入漏洞

Source

https://github.com/m0nad/CVE-2014-7236_Exploit

Associated Vulnerability

Title:TWiki 注入漏洞 (CVE-2014-7236)
Description:Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to do/view/Main/WebHome.

Description

Exploit for CVE-2014-7236

Readme

Exploit for TWiki code execution CVE-2014-7236

usage: perl exploit.pl host [cmd]

ex. perl exploit.pl http://127.0.0.1/Main/WebHome "uname -a"

Reference:
http://seclists.org/fulldisclosure/2014/Oct/44

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!