vendor:
Twiki
by:
SecurityFocus
7.5
CVSS
HIGH
Directory Traversal
22
CWE
Product Name: Twiki
Affected Version From: 4
Affected Version To: 04.04
Patch Exists: YES
Related CWE: N/A
CPE: twiki
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2006
Twiki Directory Traversal Vulnerability
Twiki is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid in further attacks.
Mitigation:
Input validation should be used to prevent directory traversal attacks.