CVE-2014-7236
50Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 56%
from disclosure to weapon0 days
Published on NVDFeb 17
1st PoCOct 12
metasploitOct 9
exploitation probability
56%top 1% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to do/view/Main/WebHome.
Affected products
n/a · n/apublic PoCs found — 3
githubgithub.com/m0nad/CVE-2014-7236_Exploit★ 10cve_referencepacketstormsecurity.com/files/128623/Twiki-Perl-Code-Execution.htmlunverifiedexploitdbwww.exploit-db.com/exploits/36438unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.