CVE-2006-2942

TWiki 4.0.0, 4.0.1, and 4.0.2 allows remote attackers to gain Twiki administrator privileges via a TWiki.TWikiRegistration form with a modified action…

published June 20, 2006

CVSS
—
EPSS
2%
Percentile
75.2
In the wild
Unconfirmed
What it is

TWiki 4.0.0, 4.0.1, and 4.0.2 allows remote attackers to gain Twiki administrator privileges via a TWiki.TWikiRegistration form with a modified action attribute that references the Sandbox web instead of the user web, which can then be used to associate the user's login name with the WikiName of a member of the TWikiAdminGroup.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01575 · 75.2th percentile
Published
2006-06-20T18:00Z
EPSS history
Timeline
  • 20 JUN 18:00Z
    TWiki 4.0.0, 4.0.1, and 4.0.2 allows remote attackers to gain Twiki administrator privileges via a TWiki.TWikiRegistration form with a modified action…
    cvelistv5