CVE-2011-4453
Summary
| CVE | CVE-2011-4453 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2011-12-22 15:29:20 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitrary code via PHP sequences in a crafted order parameter in a pagelist directive, leading to unintended use of the PHP create_function function. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:L/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Pmwiki | Pmwiki | 2.0.0 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.0.1 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.0.10 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.0.11 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.0.12 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.0.13 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.0.2 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.0.3 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.0.4 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.0.5 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.0.6 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.0.7 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.0.8 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.0.9 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.1.0 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.1.1 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.1.10 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.1.11 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.1.12 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.1.13 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.1.14 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.1.15 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.1.16 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.1.17 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.1.18 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.1.19 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.1.2 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.1.20 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.1.21 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.1.22 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.1.23 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.1.24 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.1.25 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.1.26 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.1.27 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.1.3 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.1.4 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.1.5 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.1.6 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.1.7 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.1.8 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.1.9 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta1 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta10 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta11 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta12 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta13 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta14 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta15 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta16 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta17 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta18 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta19 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta2 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta20 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta21 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta22 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta23 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta24 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta25 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta26 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta27 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta28 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta29 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta3 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta30 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta31 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta32 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta33 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta34 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta35 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta36 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta37 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta38 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta39 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta4 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta40 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta41 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta42 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta43 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta44 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta45 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta46 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta47 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta48 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta49 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta5 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta50 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta51 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta52 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta53 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta54 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta55 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta56 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta57 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta58 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta59 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta6 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta60 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta61 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta62 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta63 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta64 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta65 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta66 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta67 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta68 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta7 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta8 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.0 | beta9 | All | All |
| Application | Pmwiki | Pmwiki | 2.2.1 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.10 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.11 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.12 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.13 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.14 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.15 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.16 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.17 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.18 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.19 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.2 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.20 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.21 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.22 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.23 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.24 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.25 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.26 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.27 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.28 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.29 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.3 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.30 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.32 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.33 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.34 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.4 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.5 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.6 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.7 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.8 | All | All | All |
| Application | Pmwiki | Pmwiki | 2.2.9 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| PmWiki <= 2.2.34 (pagelist) Remote PHP Code Injection Exploit | af854a3a-2127-422b-91ae-364da2661108 | www.exploit-db.com | Exploit |
| PmWiki | PITS / 01271 | af854a3a-2127-422b-91ae-364da2661108 | www.pmwiki.org | Exploit, Patch |
| PmWiki <= 2.2.34 (pagelist) Remote PHP Code Injection Exploit | af854a3a-2127-422b-91ae-364da2661108 | www.exploit-db.com | Exploit |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.