diff --git a/modules/exploits/unix/http/twiki_debug_plugins.rb b/modules/exploits/unix/http/twiki_debug_plugins.rb index 7faa237bbe..2c937e58c9 100644 --- a/modules/exploits/unix/http/twiki_debug_plugins.rb +++ b/modules/exploits/unix/http/twiki_debug_plugins.rb @@ -14,9 +14,9 @@ class Metasploit3 < Msf::Exploit::Remote super(update_info(info, 'Name' => 'TWiki Debugenableplugins Remote Code Execution', 'Description' => %q{ - TWiki 4.0.x-6.0.0 contains a vulnerability that allows remote code execution. + TWiki 4.0.x-6.0.0 contains a vulnerability in the Debug functionality. The value of the debugenableplugins parameter is used without proper sanitization - in an eval function which allows remote code execution + in an Perl eval statement which allows remote code execution }, 'Author' => [