Vulnerabilities > Twiki > Twiki > 5.0

DATE CVE VULNERABILITY TITLE RISK
2020-02-17 CVE-2014-7236 Injection vulnerability in Twiki
Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to do/view/Main/WebHome.
network
low complexity
twiki CWE-74
critical
 9.1
9.1
2019-11-07 CVE-2013-1751 Improper Input Validation vulnerability in Twiki
TWiki before 5.1.4 allows remote attackers to execute arbitrary shell commands by sending a crafted '%MAKETEXT{}%' parameter value containing Perl backtick characters.
network
low complexity
twiki CWE-20
critical
 9.8
9.8