CVE-2011-4453 The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitrary code via PHP sequences in a crafted order parameter in a pagelist directive,....
HighCVSS 7.5
EPSS 52.0%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitrary code via PHP sequences in a crafted order parameter in a pagelist directive, leading to unintended use of the PHP create_function function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pmwiki | = 2.0.0 | No fix listed |
| pmwiki | = 2.0.1 | No fix listed |
| pmwiki | = 2.0.2 | No fix listed |
| pmwiki | = 2.0.3 | No fix listed |
| pmwiki | = 2.0.4 | No fix listed |
| pmwiki | = 2.0.5 | No fix listed |
| pmwiki | = 2.0.6 | No fix listed |
| pmwiki | = 2.0.7 | No fix listed |
| pmwiki | = 2.0.8 | No fix listed |
| pmwiki | = 2.0.9 | No fix listed |
| pmwiki | = 2.0.10 | No fix listed |
| pmwiki | = 2.0.11 | No fix listed |
| pmwiki | = 2.0.12 | No fix listed |
| pmwiki | = 2.0.13 | No fix listed |
| pmwiki | = 2.1.0 | No fix listed |
| pmwiki | = 2.1.1 | No fix listed |
| pmwiki | = 2.1.2 | No fix listed |
| pmwiki | = 2.1.3 | No fix listed |
| pmwiki | = 2.1.4 | No fix listed |
| pmwiki | = 2.1.5 | No fix listed |
| pmwiki | = 2.1.6 | No fix listed |
| pmwiki | = 2.1.7 | No fix listed |
| pmwiki | = 2.1.8 | No fix listed |
| pmwiki | = 2.1.9 | No fix listed |
| pmwiki | = 2.1.10 | No fix listed |
Show 119 more
| Product | Affected versions | Fixed in |
|---|---|---|
| pmwiki | = 2.1.11 | No fix listed |
| pmwiki | = 2.1.12 | No fix listed |
| pmwiki | = 2.1.13 | No fix listed |
| pmwiki | = 2.1.14 | No fix listed |
| pmwiki | = 2.1.15 | No fix listed |
| pmwiki | = 2.1.16 | No fix listed |
| pmwiki | = 2.1.17 | No fix listed |
| pmwiki | = 2.1.18 | No fix listed |
| pmwiki | = 2.1.19 | No fix listed |
| pmwiki | = 2.1.20 | No fix listed |
| pmwiki | = 2.1.21 | No fix listed |
| pmwiki | = 2.1.22 | No fix listed |
| pmwiki | = 2.1.23 | No fix listed |
| pmwiki | = 2.1.24 | No fix listed |
| pmwiki | = 2.1.25 | No fix listed |
| pmwiki | = 2.1.26 | No fix listed |
| pmwiki | = 2.1.27 | No fix listed |
| pmwiki | = 2.2.0 | No fix listed |
| pmwiki | = 2.2.0-beta1 | No fix listed |
| pmwiki | = 2.2.0-beta10 | No fix listed |
| pmwiki | = 2.2.0-beta11 | No fix listed |
| pmwiki | = 2.2.0-beta12 | No fix listed |
| pmwiki | = 2.2.0-beta13 | No fix listed |
| pmwiki | = 2.2.0-beta14 | No fix listed |
| pmwiki | = 2.2.0-beta15 | No fix listed |
| pmwiki | = 2.2.0-beta16 | No fix listed |
| pmwiki | = 2.2.0-beta17 | No fix listed |
| pmwiki | = 2.2.0-beta18 | No fix listed |
| pmwiki | = 2.2.0-beta19 | No fix listed |
| pmwiki | = 2.2.0-beta2 | No fix listed |
| pmwiki | = 2.2.0-beta20 | No fix listed |
| pmwiki | = 2.2.0-beta21 | No fix listed |
| pmwiki | = 2.2.0-beta22 | No fix listed |
| pmwiki | = 2.2.0-beta23 | No fix listed |
| pmwiki | = 2.2.0-beta24 | No fix listed |
| pmwiki | = 2.2.0-beta25 | No fix listed |
| pmwiki | = 2.2.0-beta26 | No fix listed |
| pmwiki | = 2.2.0-beta27 | No fix listed |
| pmwiki | = 2.2.0-beta28 | No fix listed |
| pmwiki | = 2.2.0-beta29 | No fix listed |
| pmwiki | = 2.2.0-beta3 | No fix listed |
| pmwiki | = 2.2.0-beta30 | No fix listed |
| pmwiki | = 2.2.0-beta31 | No fix listed |
| pmwiki | = 2.2.0-beta32 | No fix listed |
| pmwiki | = 2.2.0-beta33 | No fix listed |
| pmwiki | = 2.2.0-beta34 | No fix listed |
| pmwiki | = 2.2.0-beta35 | No fix listed |
| pmwiki | = 2.2.0-beta36 | No fix listed |
| pmwiki | = 2.2.0-beta37 | No fix listed |
| pmwiki | = 2.2.0-beta38 | No fix listed |
| pmwiki | = 2.2.0-beta39 | No fix listed |
| pmwiki | = 2.2.0-beta4 | No fix listed |
| pmwiki | = 2.2.0-beta40 | No fix listed |
| pmwiki | = 2.2.0-beta41 | No fix listed |
| pmwiki | = 2.2.0-beta42 | No fix listed |
| pmwiki | = 2.2.0-beta43 | No fix listed |
| pmwiki | = 2.2.0-beta44 | No fix listed |
| pmwiki | = 2.2.0-beta45 | No fix listed |
| pmwiki | = 2.2.0-beta46 | No fix listed |
| pmwiki | = 2.2.0-beta47 | No fix listed |
| pmwiki | = 2.2.0-beta48 | No fix listed |
| pmwiki | = 2.2.0-beta49 | No fix listed |
| pmwiki | = 2.2.0-beta5 | No fix listed |
| pmwiki | = 2.2.0-beta50 | No fix listed |
| pmwiki | = 2.2.0-beta51 | No fix listed |
| pmwiki | = 2.2.0-beta52 | No fix listed |
| pmwiki | = 2.2.0-beta53 | No fix listed |
| pmwiki | = 2.2.0-beta54 | No fix listed |
| pmwiki | = 2.2.0-beta55 | No fix listed |
| pmwiki | = 2.2.0-beta56 | No fix listed |
| pmwiki | = 2.2.0-beta57 | No fix listed |
| pmwiki | = 2.2.0-beta58 | No fix listed |
| pmwiki | = 2.2.0-beta59 | No fix listed |
| pmwiki | = 2.2.0-beta6 | No fix listed |
| pmwiki | = 2.2.0-beta60 | No fix listed |
| pmwiki | = 2.2.0-beta61 | No fix listed |
| pmwiki | = 2.2.0-beta62 | No fix listed |
| pmwiki | = 2.2.0-beta63 | No fix listed |
| pmwiki | = 2.2.0-beta64 | No fix listed |
| pmwiki | = 2.2.0-beta65 | No fix listed |
| pmwiki | = 2.2.0-beta66 | No fix listed |
| pmwiki | = 2.2.0-beta67 | No fix listed |
| pmwiki | = 2.2.0-beta68 | No fix listed |
| pmwiki | = 2.2.0-beta7 | No fix listed |
| pmwiki | = 2.2.0-beta8 | No fix listed |
| pmwiki | = 2.2.0-beta9 | No fix listed |
| pmwiki | = 2.2.1 | No fix listed |
| pmwiki | = 2.2.2 | No fix listed |
| pmwiki | = 2.2.3 | No fix listed |
| pmwiki | = 2.2.4 | No fix listed |
| pmwiki | = 2.2.5 | No fix listed |
| pmwiki | = 2.2.6 | No fix listed |
| pmwiki | = 2.2.7 | No fix listed |
| pmwiki | = 2.2.8 | No fix listed |
| pmwiki | = 2.2.9 | No fix listed |
| pmwiki | = 2.2.10 | No fix listed |
| pmwiki | = 2.2.11 | No fix listed |
| pmwiki | = 2.2.12 | No fix listed |
| pmwiki | = 2.2.13 | No fix listed |
| pmwiki | = 2.2.14 | No fix listed |
| pmwiki | = 2.2.15 | No fix listed |
| pmwiki | = 2.2.16 | No fix listed |
| pmwiki | = 2.2.17 | No fix listed |
| pmwiki | = 2.2.18 | No fix listed |
| pmwiki | = 2.2.19 | No fix listed |
| pmwiki | = 2.2.20 | No fix listed |
| pmwiki | = 2.2.21 | No fix listed |
| pmwiki | = 2.2.22 | No fix listed |
| pmwiki | = 2.2.23 | No fix listed |
| pmwiki | = 2.2.24 | No fix listed |
| pmwiki | = 2.2.25 | No fix listed |
| pmwiki | = 2.2.26 | No fix listed |
| pmwiki | = 2.2.27 | No fix listed |
| pmwiki | = 2.2.28 | No fix listed |
| pmwiki | = 2.2.29 | No fix listed |
| pmwiki | = 2.2.30 | No fix listed |
| pmwiki | = 2.2.32 | No fix listed |
| pmwiki | = 2.2.33 | No fix listed |
| pmwiki | = 2.2.34 | No fix listed |
References
- 18149 exploit
- 18243 exploit
- www.pmwiki.org exploit patch