4.1.2

DATE	CVE	VULNERABILITY TITLE	RISK
2008-12-10	CVE-2008-5304	Cross-Site Scripting vulnerability in Twiki Cross-site scripting (XSS) vulnerability in TWiki before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via the %URLPARAM{}% variable. network twiki CWE-79	4.3
2008-09-18	CVE-2008-3195	Path Traversal vulnerability in Twiki Directory traversal vulnerability in bin/configure in TWiki before 4.2.3, when a certain step in the installation guide is skipped, allows remote attackers to read arbitrary files via a query string containing a .. network twiki CWE-22	6.8
2007-10-04	CVE-2007-5193	Information Disclosure vulnerability in Twiki 4.1.2 The default configuration for twiki 4.1.2 on Debian GNU/Linux, and possibly other operating systems, specifies the work area directory (cfg{RCS}{WorkAreaDir}) under the web document root, which might allow remote attackers to obtain sensitive information when .htaccess restrictions are not applied. network low complexity debian twiki	5.0