November 28, 2004

Major TWiki Security Hole-- Media Technology --

A major security hole has been found in TWiki which allows anyone with access to the search function to execute arbitrary shell commands with the privilages of the web-server process. Anyone running TWiki should read here and upgrade and/or take countermeasures immediately.

Posted by bug to Media Technology at November 28, 2004 6:32 AM | TrackBack
Comments
Post a comment












Anonymous posting is allowed, as are these HTML tags — a href, b, br, p, strong, em, ul, li, blockquote.
Email addresses are spam-protected.

You must have Javascript enabled to comment, due to the code I'm using to try to outwit spammers. Sorry for any inconvenience this may cause.

Remember Me