7.5

CVE-2011-4453

Exploit
The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitrary code via PHP sequences in a crafted order parameter in a pagelist directive, leading to unintended use of the PHP create_function function.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Pmwiki ≫ Pmwiki Version 2.0.0
Pmwiki ≫ Pmwiki Version 2.0.1
Pmwiki ≫ Pmwiki Version 2.0.2
Pmwiki ≫ Pmwiki Version 2.0.3
Pmwiki ≫ Pmwiki Version 2.0.4
Pmwiki ≫ Pmwiki Version 2.0.5
Pmwiki ≫ Pmwiki Version 2.0.6
Pmwiki ≫ Pmwiki Version 2.0.7
Pmwiki ≫ Pmwiki Version 2.0.8
Pmwiki ≫ Pmwiki Version 2.0.9
Pmwiki ≫ Pmwiki Version 2.0.10
Pmwiki ≫ Pmwiki Version 2.0.11
Pmwiki ≫ Pmwiki Version 2.0.12
Pmwiki ≫ Pmwiki Version 2.0.13
Pmwiki ≫ Pmwiki Version 2.1.0
Pmwiki ≫ Pmwiki Version 2.1.1
Pmwiki ≫ Pmwiki Version 2.1.2
Pmwiki ≫ Pmwiki Version 2.1.3
Pmwiki ≫ Pmwiki Version 2.1.4
Pmwiki ≫ Pmwiki Version 2.1.5
Pmwiki ≫ Pmwiki Version 2.1.6
Pmwiki ≫ Pmwiki Version 2.1.7
Pmwiki ≫ Pmwiki Version 2.1.8
Pmwiki ≫ Pmwiki Version 2.1.9
Pmwiki ≫ Pmwiki Version 2.1.10
Pmwiki ≫ Pmwiki Version 2.1.11
Pmwiki ≫ Pmwiki Version 2.1.12
Pmwiki ≫ Pmwiki Version 2.1.13
Pmwiki ≫ Pmwiki Version 2.1.14
Pmwiki ≫ Pmwiki Version 2.1.15
Pmwiki ≫ Pmwiki Version 2.1.16
Pmwiki ≫ Pmwiki Version 2.1.17
Pmwiki ≫ Pmwiki Version 2.1.18
Pmwiki ≫ Pmwiki Version 2.1.19
Pmwiki ≫ Pmwiki Version 2.1.20
Pmwiki ≫ Pmwiki Version 2.1.21
Pmwiki ≫ Pmwiki Version 2.1.22
Pmwiki ≫ Pmwiki Version 2.1.23
Pmwiki ≫ Pmwiki Version 2.1.24
Pmwiki ≫ Pmwiki Version 2.1.25
Pmwiki ≫ Pmwiki Version 2.1.26
Pmwiki ≫ Pmwiki Version 2.1.27
Pmwiki ≫ Pmwiki Version 2.2.0
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta1
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta10
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta11
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta12
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta13
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta14
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta15
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta16
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta17
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta18
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta19
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta2
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta20
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta21
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta22
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta23
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta24
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta25
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta26
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta27
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta28
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta29
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta3
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta30
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta31
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta32
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta33
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta34
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta35
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta36
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta37
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta38
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta39
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta4
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta40
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta41
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta42
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta43
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta44
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta45
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta46
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta47
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta48
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta49
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta5
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta50
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta51
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta52
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta53
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta54
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta55
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta56
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta57
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta58
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta59
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta6
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta60
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta61
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta62
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta63
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta64
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta65
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta66
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta67
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta68
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta7
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta8
Pmwiki ≫ Pmwiki Version 2.2.0 Update beta9
Pmwiki ≫ Pmwiki Version 2.2.1
Pmwiki ≫ Pmwiki Version 2.2.2
Pmwiki ≫ Pmwiki Version 2.2.3
Pmwiki ≫ Pmwiki Version 2.2.4
Pmwiki ≫ Pmwiki Version 2.2.5
Pmwiki ≫ Pmwiki Version 2.2.6
Pmwiki ≫ Pmwiki Version 2.2.7
Pmwiki ≫ Pmwiki Version 2.2.8
Pmwiki ≫ Pmwiki Version 2.2.9
Pmwiki ≫ Pmwiki Version 2.2.10
Pmwiki ≫ Pmwiki Version 2.2.11
Pmwiki ≫ Pmwiki Version 2.2.12
Pmwiki ≫ Pmwiki Version 2.2.13
Pmwiki ≫ Pmwiki Version 2.2.14
Pmwiki ≫ Pmwiki Version 2.2.15
Pmwiki ≫ Pmwiki Version 2.2.16
Pmwiki ≫ Pmwiki Version 2.2.17
Pmwiki ≫ Pmwiki Version 2.2.18
Pmwiki ≫ Pmwiki Version 2.2.19
Pmwiki ≫ Pmwiki Version 2.2.20
Pmwiki ≫ Pmwiki Version 2.2.21
Pmwiki ≫ Pmwiki Version 2.2.22
Pmwiki ≫ Pmwiki Version 2.2.23
Pmwiki ≫ Pmwiki Version 2.2.24
Pmwiki ≫ Pmwiki Version 2.2.25
Pmwiki ≫ Pmwiki Version 2.2.26
Pmwiki ≫ Pmwiki Version 2.2.27
Pmwiki ≫ Pmwiki Version 2.2.28
Pmwiki ≫ Pmwiki Version 2.2.29
Pmwiki ≫ Pmwiki Version 2.2.30
Pmwiki ≫ Pmwiki Version 2.2.32
Pmwiki ≫ Pmwiki Version 2.2.33
Pmwiki ≫ Pmwiki Version 2.2.34
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 51.98% 0.988
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

http://www.exploit-db.com/exploits/18149/
Exploit
http://www.exploit-db.com/exploits/18243/
Exploit
http://www.pmwiki.org/wiki/PITS/01271
Patch
Exploit