{"uuid": "e84a7166-1f43-4608-8942-b64068c53844", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-6081", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/moinmoin_twikidraw.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Unknown\", \"HTP\", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability in MoinMoin 1.9.5. The vulnerability\\n          exists on the manage of the twikidraw actions, where a traversal path can be used\\n          in order to upload arbitrary files. Exploitation is achieved on Apached/mod_wsgi\\n          configurations by overwriting moin.wsgi, which allows to execute arbitrary python\\n          code, as exploited in the wild on July, 2012. This module is \\\"ManualRanking,\\\" and\\n          the user is warned to use this module at his own risk since it will overwrite the\\n          moin.wsgi file, required for the correct working of the MoinMoin wiki. While the\\n          exploit will try to restore the attacked application at post exploitation, successful\\n          restoration cannot be guaranteed.\", \"disclosure_date\": \"2012-12-30\", \"fullname\": \"exploit/unix/webapp/moinmoin_twikidraw\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"MoinMoin twikidraw Action Traversal File Upload\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/moinmoin_twikidraw.rb\", \"platform\": \"Unix\", \"post_auth\": true, \"rank\": 0, \"ref_name\": \"unix/webapp/moinmoin_twikidraw\", \"references\": [\"CVE-2012-6081\", \"OSVDB-88825\", \"BID-57082\", \"EDB-25304\", \"URL-http://web.archive.org/web/20221221070124/http://hg.moinmo.in/moin/1.9/rev/7e7e1cbb9d3f\", \"URL-http://wiki.python.org/moin/WikiAttack2013\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"MoinMoin 1.9.5\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:44.178284Z"}