Test ID:	1.3.6.1.4.1.25623.1.0.802049
Category:	Web application abuses
Title:	Foswiki 'MAKETEXT' variable RCE Vulnerability
Summary:	foswiki is prone to a remote command execution (RCE) vulnerability.
Description:	Summary: foswiki is prone to a remote command execution (RCE) vulnerability. Vulnerability Insight: flaw is due to improper validation of '%MAKETEXT{}%' foswiki macro (UserInterfaceInternationalisation is enabled) which is used to localize user interface content to a language of choice. Vulnerability Impact: Successful exploitation could allow attackers to execute shell commands by Perl backtick (``) operators. Affected Software/OS: Foswiki version 1.0.0 through 1.0.10 and 1.1.0 through 1.1.6 Solution: Upgrade to Foswiki version 1.1.7 or later or apply the patch from the referenced vendor advisories. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-6329 BugTraq ID: 56950 http://www.securityfocus.com/bid/56950 http://www.mandriva.com/security/advisories?name=MDVSA-2013:113 https://bugzilla.redhat.com/show_bug.cgi?id=884354 http://sourceforge.net/mailarchive/message.php?msg_id=30219695 http://openwall.com/lists/oss-security/2012/12/11/4 http://code.activestate.com/lists/perl5-porters/187763/ http://code.activestate.com/lists/perl5-porters/187746/ RedHat Security Advisories: RHSA-2013:0685 http://rhn.redhat.com/errata/RHSA-2013-0685.html http://www.ubuntu.com/usn/USN-2099-1 Common Vulnerability Exposure (CVE) ID: CVE-2012-6330
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.