Lucene search
HistoryDec 22, 2011 - 3:29 p.m.
CVE-2011-4453
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.901 High
EPSS
Percentile
98.8%
The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitrary code via PHP sequences in a crafted order parameter in a pagelist directive, leading to unintended use of the PHP create_function function.
Affected configurations
Node
pmwikipmwikiMatch2.0.0
ORpmwikipmwikiMatch2.0.1
ORpmwikipmwikiMatch2.0.2
ORpmwikipmwikiMatch2.0.3
ORpmwikipmwikiMatch2.0.4
ORpmwikipmwikiMatch2.0.5
ORpmwikipmwikiMatch2.0.6
ORpmwikipmwikiMatch2.0.7
ORpmwikipmwikiMatch2.0.8
ORpmwikipmwikiMatch2.0.9
ORpmwikipmwikiMatch2.0.10
ORpmwikipmwikiMatch2.0.11
ORpmwikipmwikiMatch2.0.12
ORpmwikipmwikiMatch2.0.13
ORpmwikipmwikiMatch2.1.0
ORpmwikipmwikiMatch2.1.1
ORpmwikipmwikiMatch2.1.2
ORpmwikipmwikiMatch2.1.3
ORpmwikipmwikiMatch2.1.4
ORpmwikipmwikiMatch2.1.5
ORpmwikipmwikiMatch2.1.6
ORpmwikipmwikiMatch2.1.7
ORpmwikipmwikiMatch2.1.8
ORpmwikipmwikiMatch2.1.9
ORpmwikipmwikiMatch2.1.10
ORpmwikipmwikiMatch2.1.11
ORpmwikipmwikiMatch2.1.12
ORpmwikipmwikiMatch2.1.13
ORpmwikipmwikiMatch2.1.14
ORpmwikipmwikiMatch2.1.15
ORpmwikipmwikiMatch2.1.16
ORpmwikipmwikiMatch2.1.17
ORpmwikipmwikiMatch2.1.18
ORpmwikipmwikiMatch2.1.19
ORpmwikipmwikiMatch2.1.20
ORpmwikipmwikiMatch2.1.21
ORpmwikipmwikiMatch2.1.22
ORpmwikipmwikiMatch2.1.23
ORpmwikipmwikiMatch2.1.24
ORpmwikipmwikiMatch2.1.25
ORpmwikipmwikiMatch2.1.26
ORpmwikipmwikiMatch2.1.27
ORpmwikipmwikiMatch2.2.0
ORpmwikipmwikiMatch2.2.0beta1
ORpmwikipmwikiMatch2.2.0beta10
ORpmwikipmwikiMatch2.2.0beta11
ORpmwikipmwikiMatch2.2.0beta12
ORpmwikipmwikiMatch2.2.0beta13
ORpmwikipmwikiMatch2.2.0beta14
ORpmwikipmwikiMatch2.2.0beta15
ORpmwikipmwikiMatch2.2.0beta16
ORpmwikipmwikiMatch2.2.0beta17
ORpmwikipmwikiMatch2.2.0beta18
ORpmwikipmwikiMatch2.2.0beta19
ORpmwikipmwikiMatch2.2.0beta2
ORpmwikipmwikiMatch2.2.0beta20
ORpmwikipmwikiMatch2.2.0beta21
ORpmwikipmwikiMatch2.2.0beta22
ORpmwikipmwikiMatch2.2.0beta23
ORpmwikipmwikiMatch2.2.0beta24
ORpmwikipmwikiMatch2.2.0beta25
ORpmwikipmwikiMatch2.2.0beta26
ORpmwikipmwikiMatch2.2.0beta27
ORpmwikipmwikiMatch2.2.0beta28
ORpmwikipmwikiMatch2.2.0beta29
ORpmwikipmwikiMatch2.2.0beta3
ORpmwikipmwikiMatch2.2.0beta30
ORpmwikipmwikiMatch2.2.0beta31
ORpmwikipmwikiMatch2.2.0beta32
ORpmwikipmwikiMatch2.2.0beta33
ORpmwikipmwikiMatch2.2.0beta34
ORpmwikipmwikiMatch2.2.0beta35
ORpmwikipmwikiMatch2.2.0beta36
ORpmwikipmwikiMatch2.2.0beta37
ORpmwikipmwikiMatch2.2.0beta38
ORpmwikipmwikiMatch2.2.0beta39
ORpmwikipmwikiMatch2.2.0beta4
ORpmwikipmwikiMatch2.2.0beta40
ORpmwikipmwikiMatch2.2.0beta41
ORpmwikipmwikiMatch2.2.0beta42
ORpmwikipmwikiMatch2.2.0beta43
ORpmwikipmwikiMatch2.2.0beta44
ORpmwikipmwikiMatch2.2.0beta45
ORpmwikipmwikiMatch2.2.0beta46
ORpmwikipmwikiMatch2.2.0beta47
ORpmwikipmwikiMatch2.2.0beta48
ORpmwikipmwikiMatch2.2.0beta49
ORpmwikipmwikiMatch2.2.0beta5
ORpmwikipmwikiMatch2.2.0beta50
ORpmwikipmwikiMatch2.2.0beta51
ORpmwikipmwikiMatch2.2.0beta52
ORpmwikipmwikiMatch2.2.0beta53
ORpmwikipmwikiMatch2.2.0beta54
ORpmwikipmwikiMatch2.2.0beta55
ORpmwikipmwikiMatch2.2.0beta56
ORpmwikipmwikiMatch2.2.0beta57
ORpmwikipmwikiMatch2.2.0beta58
ORpmwikipmwikiMatch2.2.0beta59
ORpmwikipmwikiMatch2.2.0beta6
ORpmwikipmwikiMatch2.2.0beta60
ORpmwikipmwikiMatch2.2.0beta61
ORpmwikipmwikiMatch2.2.0beta62
ORpmwikipmwikiMatch2.2.0beta63
ORpmwikipmwikiMatch2.2.0beta64
ORpmwikipmwikiMatch2.2.0beta65
ORpmwikipmwikiMatch2.2.0beta66
ORpmwikipmwikiMatch2.2.0beta67
ORpmwikipmwikiMatch2.2.0beta68
ORpmwikipmwikiMatch2.2.0beta7
ORpmwikipmwikiMatch2.2.0beta8
ORpmwikipmwikiMatch2.2.0beta9
ORpmwikipmwikiMatch2.2.1
ORpmwikipmwikiMatch2.2.2
ORpmwikipmwikiMatch2.2.3
ORpmwikipmwikiMatch2.2.4
ORpmwikipmwikiMatch2.2.5
ORpmwikipmwikiMatch2.2.6
ORpmwikipmwikiMatch2.2.7
ORpmwikipmwikiMatch2.2.8
ORpmwikipmwikiMatch2.2.9
ORpmwikipmwikiMatch2.2.10
ORpmwikipmwikiMatch2.2.11
ORpmwikipmwikiMatch2.2.12
ORpmwikipmwikiMatch2.2.13
ORpmwikipmwikiMatch2.2.14
ORpmwikipmwikiMatch2.2.15
ORpmwikipmwikiMatch2.2.16
ORpmwikipmwikiMatch2.2.17
ORpmwikipmwikiMatch2.2.18
ORpmwikipmwikiMatch2.2.19
ORpmwikipmwikiMatch2.2.20
ORpmwikipmwikiMatch2.2.21
ORpmwikipmwikiMatch2.2.22
ORpmwikipmwikiMatch2.2.23
ORpmwikipmwikiMatch2.2.24
ORpmwikipmwikiMatch2.2.25
ORpmwikipmwikiMatch2.2.26
ORpmwikipmwikiMatch2.2.27
ORpmwikipmwikiMatch2.2.28
ORpmwikipmwikiMatch2.2.29
ORpmwikipmwikiMatch2.2.30
ORpmwikipmwikiMatch2.2.32
ORpmwikipmwikiMatch2.2.33
ORpmwikipmwikiMatch2.2.34
Related
exploitpack
exploitpack
PmWiki 2.2.34 - pagelist Remote PHP Code Injection (1)
2011-11-23 00:00:00
openvas
openvas
PmWiki Pagelist 'order' Parameter PHP Code Injection Vulnerability
2011-11-28 00:00:00
PmWiki 2.0.x < 2.2.35 PHP Code Injection Vulnerability - Active Check
2011-11-28 00:00:00
seebug
seebug
PmWiki <= 2.2.34 (pagelist) Remote PHP Code Injection Exploit
2011-11-24 00:00:00
PmWiki <= 2.2.34 (pagelist) Remote PHP Code Injection Exploit
2014-07-01 00:00:00
dsquare
dsquare
PmWiki 2.2.34 RCE
2012-01-26 00:00:00
prion
prion
Code injection
2011-12-22 15:29:00
cvelist
cvelist
CVE-2011-4453
2022-10-03 16:15:13
packetstorm
packetstorm
PmWiki 2.2.34 Remote PHP Code Injection Exploit
2011-12-23 00:00:00
cve
cve
CVE-2011-4453
2022-10-03 16:15:13
securityvulns
securityvulns
exploitdb
exploitdb
PmWiki 2.2.34 - 'pagelist' Remote PHP Code Injection (1)
2011-11-23 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.901 High
EPSS
Percentile
98.8%
Related for NVD:CVE-2011-4453