The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string. Date published : 2004-1