Critical severity9.1NVD Advisory· Published Feb 17, 2020· Updated Jun 17, 2026

CVE-2014-7236

Description

Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to do/view/Main/WebHome.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

TWiki/Twiki3 versions
cpe:2.3:a:twiki:twiki:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:twiki:twiki:*:*:*:*:*:*:*:*range: >=4.0,<=4.0.5
- cpe:2.3:a:twiki:twiki:6.0:*:*:*:*:*:*:*
- (no CPE)range: <6.0.1
TWiki/TWikidescription

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/128623/Twiki-Perl-Code-Execution.htmlnvdExploitThird Party AdvisoryVDB Entry
seclists.org/fulldisclosure/2014/Oct/44nvdExploitMailing ListThird Party Advisory
www.securityfocus.com/bid/70372nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1030981nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.045
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000