Sign in Get started

← All advisories

Unrated severityNVD Advisory· Published Dec 10, 2008· Updated Apr 23, 2026

CVE-2008-5305

CVE-2008-5305

Description

Eval injection vulnerability in TWiki before 4.2.4 allows remote attackers to execute arbitrary Perl code via the %SEARCH{}% variable.

Affected products

13

TWiki/Twiki13 versions
cpe:2.3:a:twiki:twiki:*:*:*:*:*:*:*:*+ 12 more
- cpe:2.3:a:twiki:twiki:*:*:*:*:*:*:*:*range: <=4.2.3
- cpe:2.3:a:twiki:twiki:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.2.2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

secunia.com/advisories/33040nvdVendor Advisory
twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2008-5305nvdVendor Advisory
securitytracker.com/idnvd
www.securityfocus.com/bid/32668nvd
www.vupen.com/english/advisories/2008/3381nvd

News mentions

0

No linked articles in our index yet.