[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fSWVRz-Ls4jBzI7WHuWJCWjCDqsS3VldHxjtbGRYxTug":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":25,"kevVulnerabilities":88,"topProductsByCves":89,"seoMetadata":92,"meta":101},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":24},32793,"twiki",2,30,0,45,"2020-02-17","t",[16,19],{"id":17,"product_name":8,"version_count":12,"cve_count":18,"kev_count":11,"last_cve_update":13},165919,29,{"id":20,"product_name":21,"version_count":11,"cve_count":22,"kev_count":11,"last_cve_update":23},165918,"imagegalleryplugin",1,"2005-02-23","Twiki is a technology vendor with 2 tracked products and 30 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[26,35,42,48,55,61,66,72,78,83],{"cveId":27,"description":28,"publishedDate":29,"cvssScore":30,"cvssVersion":31,"severity":32,"isKev":33,"epssScore":34},"CVE-2005-2877","The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers.","2005-09-16",7.5,"v2","High",false,0.70903,{"cveId":36,"description":37,"publishedDate":38,"cvssScore":39,"cvssVersion":31,"severity":40,"isKev":33,"epssScore":41},"CVE-2004-1037","The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string.","2005-03-01",10,"Critical",0.61668,{"cveId":43,"description":44,"publishedDate":13,"cvssScore":45,"cvssVersion":46,"severity":40,"isKev":33,"epssScore":47},"CVE-2014-7236","Eval injection vulnerability in lib\u002FTWiki\u002FPlugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to do\u002Fview\u002FMain\u002FWebHome.",9.1,"v3.1",0.55637,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"cvssVersion":31,"severity":53,"isKev":33,"epssScore":54},"CVE-2012-6330","The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6, allows remote attackers to cause a denial of service (memory consumption) via a large integer in a %MAKETEXT% macro.","2013-01-04",5,"Medium",0.35701,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":31,"severity":53,"isKev":33,"epssScore":60},"CVE-2014-7237","lib\u002FTWiki\u002FSandbox.pm in TWiki 6.0.0 and earlier, when running on Windows, allows remote attackers to bypass intended access restrictions and upload files with restricted names via a null byte (%00) in a filename to bin\u002Fupload.cgi, as demonstrated using .htaccess to execute arbitrary code.","2014-10-16",6.8,0.20059,{"cveId":62,"description":63,"publishedDate":64,"cvssScore":59,"cvssVersion":31,"severity":53,"isKev":33,"epssScore":65},"CVE-2008-3195","Directory traversal vulnerability in bin\u002Fconfigure in TWiki before 4.2.3, when a certain step in the installation guide is skipped, allows remote attackers to read arbitrary files via a query string containing a .. (dot dot) in the image variable, and execute arbitrary files via unspecified vectors.","2008-09-18",0.0828,{"cveId":67,"description":68,"publishedDate":69,"cvssScore":70,"cvssVersion":31,"severity":53,"isKev":33,"epssScore":71},"CVE-2011-3010","Multiple cross-site scripting (XSS) vulnerabilities in TWiki before 5.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the newtopic parameter in a WebCreateNewTopic action, related to the TWiki.WebCreateNewTopicTemplate topic; or (2) the query string to SlideShow.pm in the SlideShowPlugin.","2011-09-30",4.3,0.05476,{"cveId":73,"description":74,"publishedDate":75,"cvssScore":76,"cvssVersion":46,"severity":40,"isKev":33,"epssScore":77},"CVE-2013-1751","TWiki before 5.1.4 allows remote attackers to execute arbitrary shell commands by sending a crafted '%MAKETEXT{}%' parameter value containing Perl backtick characters.","2019-11-07",9.8,0.04872,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":39,"cvssVersion":31,"severity":40,"isKev":33,"epssScore":82},"CVE-2008-5305","Eval injection vulnerability in TWiki before 4.2.4 allows remote attackers to execute arbitrary Perl code via the %SEARCH{}% variable.","2008-12-10",0.0464,{"cveId":84,"description":85,"publishedDate":86,"cvssScore":30,"cvssVersion":31,"severity":32,"isKev":33,"epssScore":87},"CVE-2006-3819","Eval injection vulnerability in the configure script in TWiki 4.0.0 through 4.0.4 allows remote attackers to execute arbitrary Perl code via an HTTP POST request containing a parameter name starting with \"TYPEOF\".","2006-07-27",0.041,[],[90,91],{"id":17,"product_name":8,"version_count":12,"cve_count":18,"kev_count":11,"last_cve_update":13},{"id":20,"product_name":21,"version_count":11,"cve_count":22,"kev_count":11,"last_cve_update":23},{"title":93,"metaDescription":94,"keywords":95,"structuredData":96},"Twiki - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Twiki covering 2 products with 30 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Twiki vulnerabilities, Twiki security, Twiki CVE, Twiki threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":97,"@type":98,"name":99,"description":94,"url":100},"https:\u002F\u002Fschema.org","Organization","Twiki","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ftwiki",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":102,"apiVersion":103},"2026-10-18T18:48:40.653Z","3.0"]