$ cve CVE-2012-6081 JSON

CVE-2012-6081 EXPLOIT

6.0

MEDIUM · CVSS 2.0 · EPSS 35.3% (pctl 98)

Patch early

A public exploit exists.

Description

Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, as exploited in the wild in July 2012.

Scoring

CVSS	6.0 (MEDIUM, v2.0)
Vector	AV:N/AC:M/Au:S/C:P/I:P/A:P
EPSS	35.35% — more likely to be exploited than 98% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2013-01-03
Last modified	2026-06-16

Affected (1)

Vendor	Product
moinmo	moinmoin

Public exploits

Source	Title	Date
exploit-db	MoinMoin - twikidraw Action Traversal Arbitrary File Upload (Metasploit)	2013-06-24
exploit-db	MoinMoin - Arbitrary Command Execution	2013-05-08

References

→ the Explorer · watch your stack · NVD