From 5dd718e4fa22667f683aaa36f57db5c2b628bffb Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Hans-Martin=20M=C3=BCnch=20=28h0ng10=29?= Date: Wed, 18 Mar 2015 09:51:51 +0100 Subject: [PATCH] Better description --- modules/exploits/unix/http/twiki_debug_plugins.rb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/modules/exploits/unix/http/twiki_debug_plugins.rb b/modules/exploits/unix/http/twiki_debug_plugins.rb index 7faa237bbe..2c937e58c9 100644 --- a/modules/exploits/unix/http/twiki_debug_plugins.rb +++ b/modules/exploits/unix/http/twiki_debug_plugins.rb @@ -14,9 +14,9 @@ class Metasploit3 < Msf::Exploit::Remote super(update_info(info, 'Name' => 'TWiki Debugenableplugins Remote Code Execution', 'Description' => %q{ - TWiki 4.0.x-6.0.0 contains a vulnerability that allows remote code execution. + TWiki 4.0.x-6.0.0 contains a vulnerability in the Debug functionality. The value of the debugenableplugins parameter is used without proper sanitization - in an eval function which allows remote code execution + in an Perl eval statement which allows remote code execution }, 'Author' => [