Vendors / Phpwiki Project Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Phpwiki Project records in CISA KEV No Phpwiki Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 69
The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a device option in the edit[content] parameter to index.php/HeIp.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.64971 · Published 2014-09-11 · No fix listed CWE-94
Priority MEDIUM 54
Tuleap before 9.7 allows command injection via the PhpWiki 1.3.10 SyntaxHighlighter plugin.
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.16125 · Published 2017-04-29 · No fix listed CWE-78
Open these records in search → All records by CVSS severity
0 2 0 0 0
