Unrated severityNVD Advisory· Published May 28, 2001· Updated Apr 16, 2026
CVE-2001-1348
CVE-2001-1348
Description
TWIG 2.6.2 and earlier allows remote attackers to perform unauthorized database operations via a SQL injection attack on the id parameter.
Affected products
21cpe:2.3:a:twig_development_team:twig:2.0:*:*:*:*:*:*:*+ 20 more
- cpe:2.3:a:twig_development_team:twig:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:twig_development_team:twig:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:twig_development_team:twig:2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:twig_development_team:twig:2.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:twig_development_team:twig:2.0_beta1:*:*:*:*:*:*:*
- cpe:2.3:a:twig_development_team:twig:2.0_beta2:*:*:*:*:*:*:*
- cpe:2.3:a:twig_development_team:twig:2.0_beta3:*:*:*:*:*:*:*
- cpe:2.3:a:twig_development_team:twig:2.1:*:*:*:*:*:*:*
- cpe:2.3:a:twig_development_team:twig:2.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:twig_development_team:twig:2.2:*:*:*:*:*:*:*
- cpe:2.3:a:twig_development_team:twig:2.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:twig_development_team:twig:2.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:twig_development_team:twig:2.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:twig_development_team:twig:2.3:*:*:*:*:*:*:*
- cpe:2.3:a:twig_development_team:twig:2.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:twig_development_team:twig:2.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:twig_development_team:twig:2.4:*:*:*:*:*:*:*
- cpe:2.3:a:twig_development_team:twig:2.5:*:*:*:*:*:*:*
- cpe:2.3:a:twig_development_team:twig:2.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:twig_development_team:twig:2.6:*:*:*:*:*:*:*
- cpe:2.3:a:twig_development_team:twig:2.6.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www.iss.net/security_center/static/6619.phpnvdPatchVendor Advisory
- www.securityfocus.com/bid/2791nvdExploitPatchVendor Advisory
- archives.neohapsis.com/archives/bugtraq/2001-05/0260.htmlnvd
- twig.screwdriver.net/index.php3nvd
News mentions
0No linked articles in our index yet.