Evil-DB LogoEvil-DB
← All CVEs

CVE-2011-4453

high · 7.5

The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitrary code via PHP sequences in a crafted order parameter in a pagelist directive, leading to unintended use of the PHP create_function function.

7.5
CVSS
52.0%
EPSS (exploit prob.)
99th
EPSS percentile
2011-12-22
Published

AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

CWE-94

Affected products

VendorProductAffected versions
pmwikipmwiki2.0.0
pmwikipmwiki2.0.1
pmwikipmwiki2.0.2
pmwikipmwiki2.0.3
pmwikipmwiki2.0.4
pmwikipmwiki2.0.5
pmwikipmwiki2.0.6
pmwikipmwiki2.0.7
pmwikipmwiki2.0.8
pmwikipmwiki2.0.9
pmwikipmwiki2.0.10
pmwikipmwiki2.0.11
pmwikipmwiki2.0.12
pmwikipmwiki2.0.13
pmwikipmwiki2.1.0
pmwikipmwiki2.1.1
pmwikipmwiki2.1.2
pmwikipmwiki2.1.3
pmwikipmwiki2.1.4
pmwikipmwiki2.1.5
pmwikipmwiki2.1.6
pmwikipmwiki2.1.7
pmwikipmwiki2.1.8
pmwikipmwiki2.1.9
pmwikipmwiki2.1.10
pmwikipmwiki2.1.11
pmwikipmwiki2.1.12
pmwikipmwiki2.1.13
pmwikipmwiki2.1.14
pmwikipmwiki2.1.15
pmwikipmwiki2.1.16
pmwikipmwiki2.1.17
pmwikipmwiki2.1.18
pmwikipmwiki2.1.19
pmwikipmwiki2.1.20
pmwikipmwiki2.1.21
pmwikipmwiki2.1.22
pmwikipmwiki2.1.23
pmwikipmwiki2.1.24
pmwikipmwiki2.1.25

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2011-4453