Read the docs
TI-2011-03856 Aliases CVE-2011-4453GHSA-w4rg-9v64-h6w4

The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows…

Priority HIGH 65CWE-94Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-94.

Summary

The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitrary code via PHP sequences in a crafted order parameter in a pagelist directive, leading to unintended use of the PHP create_function function.

Why it matters now

EPSS 0.51981 98th percentileScored 2026-11-07
Public exploit Yes 3 exploit referencesTagged by the CNA and NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 144

CPEVersionsRoleVendor
cpe:2.3:a:pmwiki:pmwiki:2.0.0:*:*:*:*:*:*:*2.0.0Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.0.1:*:*:*:*:*:*:*2.0.1Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.0.2:*:*:*:*:*:*:*2.0.2Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.0.3:*:*:*:*:*:*:*2.0.3Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.0.4:*:*:*:*:*:*:*2.0.4Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.0.5:*:*:*:*:*:*:*2.0.5Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.0.6:*:*:*:*:*:*:*2.0.6Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.0.7:*:*:*:*:*:*:*2.0.7Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.0.8:*:*:*:*:*:*:*2.0.8Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.0.9:*:*:*:*:*:*:*2.0.9Vulnerablepmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.0.0:*:*:*:*:*:*:* Versions 2.0.0 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.0.1:*:*:*:*:*:*:* Versions 2.0.1 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.0.2:*:*:*:*:*:*:* Versions 2.0.2 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.0.3:*:*:*:*:*:*:* Versions 2.0.3 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.0.4:*:*:*:*:*:*:* Versions 2.0.4 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.0.5:*:*:*:*:*:*:* Versions 2.0.5 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.0.6:*:*:*:*:*:*:* Versions 2.0.6 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.0.7:*:*:*:*:*:*:* Versions 2.0.7 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.0.8:*:*:*:*:*:*:* Versions 2.0.8 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.0.9:*:*:*:*:*:*:* Versions 2.0.9 Vulnerable ·pmwiki
Show 134 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:pmwiki:pmwiki:2.0.10:*:*:*:*:*:*:*2.0.10Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.0.11:*:*:*:*:*:*:*2.0.11Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.0.12:*:*:*:*:*:*:*2.0.12Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.0.13:*:*:*:*:*:*:*2.0.13Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.1.0:*:*:*:*:*:*:*2.1.0Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.1.1:*:*:*:*:*:*:*2.1.1Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.1.2:*:*:*:*:*:*:*2.1.2Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.1.3:*:*:*:*:*:*:*2.1.3Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.1.4:*:*:*:*:*:*:*2.1.4Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.1.5:*:*:*:*:*:*:*2.1.5Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.1.6:*:*:*:*:*:*:*2.1.6Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.1.7:*:*:*:*:*:*:*2.1.7Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.1.8:*:*:*:*:*:*:*2.1.8Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.1.9:*:*:*:*:*:*:*2.1.9Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.1.10:*:*:*:*:*:*:*2.1.10Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.1.11:*:*:*:*:*:*:*2.1.11Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.1.12:*:*:*:*:*:*:*2.1.12Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.1.13:*:*:*:*:*:*:*2.1.13Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.1.14:*:*:*:*:*:*:*2.1.14Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.1.15:*:*:*:*:*:*:*2.1.15Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.1.16:*:*:*:*:*:*:*2.1.16Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.1.17:*:*:*:*:*:*:*2.1.17Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.1.18:*:*:*:*:*:*:*2.1.18Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.1.19:*:*:*:*:*:*:*2.1.19Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.1.20:*:*:*:*:*:*:*2.1.20Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.1.21:*:*:*:*:*:*:*2.1.21Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.1.22:*:*:*:*:*:*:*2.1.22Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.1.23:*:*:*:*:*:*:*2.1.23Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.1.24:*:*:*:*:*:*:*2.1.24Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.1.25:*:*:*:*:*:*:*2.1.25Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.1.26:*:*:*:*:*:*:*2.1.26Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.1.27:*:*:*:*:*:*:*2.1.27Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:*:*:*:*:*:*:*2.2.0Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta1:*:*:*:*:*:*2.2.0 beta1Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta10:*:*:*:*:*:*2.2.0 beta10Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta11:*:*:*:*:*:*2.2.0 beta11Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta12:*:*:*:*:*:*2.2.0 beta12Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta13:*:*:*:*:*:*2.2.0 beta13Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta14:*:*:*:*:*:*2.2.0 beta14Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta15:*:*:*:*:*:*2.2.0 beta15Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta16:*:*:*:*:*:*2.2.0 beta16Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta17:*:*:*:*:*:*2.2.0 beta17Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta18:*:*:*:*:*:*2.2.0 beta18Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta19:*:*:*:*:*:*2.2.0 beta19Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta2:*:*:*:*:*:*2.2.0 beta2Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta20:*:*:*:*:*:*2.2.0 beta20Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta21:*:*:*:*:*:*2.2.0 beta21Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta22:*:*:*:*:*:*2.2.0 beta22Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta23:*:*:*:*:*:*2.2.0 beta23Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta24:*:*:*:*:*:*2.2.0 beta24Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta25:*:*:*:*:*:*2.2.0 beta25Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta26:*:*:*:*:*:*2.2.0 beta26Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta27:*:*:*:*:*:*2.2.0 beta27Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta28:*:*:*:*:*:*2.2.0 beta28Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta29:*:*:*:*:*:*2.2.0 beta29Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta3:*:*:*:*:*:*2.2.0 beta3Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta30:*:*:*:*:*:*2.2.0 beta30Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta31:*:*:*:*:*:*2.2.0 beta31Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta32:*:*:*:*:*:*2.2.0 beta32Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta33:*:*:*:*:*:*2.2.0 beta33Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta34:*:*:*:*:*:*2.2.0 beta34Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta35:*:*:*:*:*:*2.2.0 beta35Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta36:*:*:*:*:*:*2.2.0 beta36Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta37:*:*:*:*:*:*2.2.0 beta37Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta38:*:*:*:*:*:*2.2.0 beta38Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta39:*:*:*:*:*:*2.2.0 beta39Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta4:*:*:*:*:*:*2.2.0 beta4Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta40:*:*:*:*:*:*2.2.0 beta40Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta41:*:*:*:*:*:*2.2.0 beta41Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta42:*:*:*:*:*:*2.2.0 beta42Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta43:*:*:*:*:*:*2.2.0 beta43Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta44:*:*:*:*:*:*2.2.0 beta44Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta45:*:*:*:*:*:*2.2.0 beta45Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta46:*:*:*:*:*:*2.2.0 beta46Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta47:*:*:*:*:*:*2.2.0 beta47Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta48:*:*:*:*:*:*2.2.0 beta48Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta49:*:*:*:*:*:*2.2.0 beta49Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta5:*:*:*:*:*:*2.2.0 beta5Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta50:*:*:*:*:*:*2.2.0 beta50Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta51:*:*:*:*:*:*2.2.0 beta51Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta52:*:*:*:*:*:*2.2.0 beta52Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta53:*:*:*:*:*:*2.2.0 beta53Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta54:*:*:*:*:*:*2.2.0 beta54Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta55:*:*:*:*:*:*2.2.0 beta55Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta56:*:*:*:*:*:*2.2.0 beta56Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta57:*:*:*:*:*:*2.2.0 beta57Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta58:*:*:*:*:*:*2.2.0 beta58Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta59:*:*:*:*:*:*2.2.0 beta59Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta6:*:*:*:*:*:*2.2.0 beta6Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta60:*:*:*:*:*:*2.2.0 beta60Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta61:*:*:*:*:*:*2.2.0 beta61Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta62:*:*:*:*:*:*2.2.0 beta62Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta63:*:*:*:*:*:*2.2.0 beta63Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta64:*:*:*:*:*:*2.2.0 beta64Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta65:*:*:*:*:*:*2.2.0 beta65Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta66:*:*:*:*:*:*2.2.0 beta66Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta67:*:*:*:*:*:*2.2.0 beta67Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta68:*:*:*:*:*:*2.2.0 beta68Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta7:*:*:*:*:*:*2.2.0 beta7Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta8:*:*:*:*:*:*2.2.0 beta8Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta9:*:*:*:*:*:*2.2.0 beta9Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.1:*:*:*:*:*:*:*2.2.1Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.2:*:*:*:*:*:*:*2.2.2Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.3:*:*:*:*:*:*:*2.2.3Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.4:*:*:*:*:*:*:*2.2.4Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.5:*:*:*:*:*:*:*2.2.5Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.6:*:*:*:*:*:*:*2.2.6Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.7:*:*:*:*:*:*:*2.2.7Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.8:*:*:*:*:*:*:*2.2.8Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.9:*:*:*:*:*:*:*2.2.9Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.10:*:*:*:*:*:*:*2.2.10Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.11:*:*:*:*:*:*:*2.2.11Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.12:*:*:*:*:*:*:*2.2.12Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.13:*:*:*:*:*:*:*2.2.13Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.14:*:*:*:*:*:*:*2.2.14Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.15:*:*:*:*:*:*:*2.2.15Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.16:*:*:*:*:*:*:*2.2.16Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.17:*:*:*:*:*:*:*2.2.17Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.18:*:*:*:*:*:*:*2.2.18Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.19:*:*:*:*:*:*:*2.2.19Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.20:*:*:*:*:*:*:*2.2.20Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.21:*:*:*:*:*:*:*2.2.21Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.22:*:*:*:*:*:*:*2.2.22Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.23:*:*:*:*:*:*:*2.2.23Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.24:*:*:*:*:*:*:*2.2.24Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.25:*:*:*:*:*:*:*2.2.25Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.26:*:*:*:*:*:*:*2.2.26Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.27:*:*:*:*:*:*:*2.2.27Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.28:*:*:*:*:*:*:*2.2.28Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.29:*:*:*:*:*:*:*2.2.29Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.30:*:*:*:*:*:*:*2.2.30Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.32:*:*:*:*:*:*:*2.2.32Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.33:*:*:*:*:*:*:*2.2.33Vulnerablepmwiki
cpe:2.3:a:pmwiki:pmwiki:2.2.34:*:*:*:*:*:*:*2.2.34Vulnerablepmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.0.10:*:*:*:*:*:*:* Versions 2.0.10 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.0.11:*:*:*:*:*:*:* Versions 2.0.11 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.0.12:*:*:*:*:*:*:* Versions 2.0.12 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.0.13:*:*:*:*:*:*:* Versions 2.0.13 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.1.0:*:*:*:*:*:*:* Versions 2.1.0 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.1.1:*:*:*:*:*:*:* Versions 2.1.1 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.1.2:*:*:*:*:*:*:* Versions 2.1.2 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.1.3:*:*:*:*:*:*:* Versions 2.1.3 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.1.4:*:*:*:*:*:*:* Versions 2.1.4 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.1.5:*:*:*:*:*:*:* Versions 2.1.5 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.1.6:*:*:*:*:*:*:* Versions 2.1.6 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.1.7:*:*:*:*:*:*:* Versions 2.1.7 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.1.8:*:*:*:*:*:*:* Versions 2.1.8 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.1.9:*:*:*:*:*:*:* Versions 2.1.9 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.1.10:*:*:*:*:*:*:* Versions 2.1.10 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.1.11:*:*:*:*:*:*:* Versions 2.1.11 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.1.12:*:*:*:*:*:*:* Versions 2.1.12 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.1.13:*:*:*:*:*:*:* Versions 2.1.13 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.1.14:*:*:*:*:*:*:* Versions 2.1.14 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.1.15:*:*:*:*:*:*:* Versions 2.1.15 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.1.16:*:*:*:*:*:*:* Versions 2.1.16 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.1.17:*:*:*:*:*:*:* Versions 2.1.17 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.1.18:*:*:*:*:*:*:* Versions 2.1.18 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.1.19:*:*:*:*:*:*:* Versions 2.1.19 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.1.20:*:*:*:*:*:*:* Versions 2.1.20 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.1.21:*:*:*:*:*:*:* Versions 2.1.21 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.1.22:*:*:*:*:*:*:* Versions 2.1.22 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.1.23:*:*:*:*:*:*:* Versions 2.1.23 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.1.24:*:*:*:*:*:*:* Versions 2.1.24 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.1.25:*:*:*:*:*:*:* Versions 2.1.25 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.1.26:*:*:*:*:*:*:* Versions 2.1.26 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.1.27:*:*:*:*:*:*:* Versions 2.1.27 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:*:*:*:*:*:*:* Versions 2.2.0 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta1:*:*:*:*:*:* Versions 2.2.0 beta1 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta10:*:*:*:*:*:* Versions 2.2.0 beta10 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta11:*:*:*:*:*:* Versions 2.2.0 beta11 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta12:*:*:*:*:*:* Versions 2.2.0 beta12 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta13:*:*:*:*:*:* Versions 2.2.0 beta13 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta14:*:*:*:*:*:* Versions 2.2.0 beta14 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta15:*:*:*:*:*:* Versions 2.2.0 beta15 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta16:*:*:*:*:*:* Versions 2.2.0 beta16 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta17:*:*:*:*:*:* Versions 2.2.0 beta17 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta18:*:*:*:*:*:* Versions 2.2.0 beta18 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta19:*:*:*:*:*:* Versions 2.2.0 beta19 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta2:*:*:*:*:*:* Versions 2.2.0 beta2 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta20:*:*:*:*:*:* Versions 2.2.0 beta20 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta21:*:*:*:*:*:* Versions 2.2.0 beta21 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta22:*:*:*:*:*:* Versions 2.2.0 beta22 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta23:*:*:*:*:*:* Versions 2.2.0 beta23 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta24:*:*:*:*:*:* Versions 2.2.0 beta24 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta25:*:*:*:*:*:* Versions 2.2.0 beta25 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta26:*:*:*:*:*:* Versions 2.2.0 beta26 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta27:*:*:*:*:*:* Versions 2.2.0 beta27 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta28:*:*:*:*:*:* Versions 2.2.0 beta28 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta29:*:*:*:*:*:* Versions 2.2.0 beta29 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta3:*:*:*:*:*:* Versions 2.2.0 beta3 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta30:*:*:*:*:*:* Versions 2.2.0 beta30 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta31:*:*:*:*:*:* Versions 2.2.0 beta31 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta32:*:*:*:*:*:* Versions 2.2.0 beta32 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta33:*:*:*:*:*:* Versions 2.2.0 beta33 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta34:*:*:*:*:*:* Versions 2.2.0 beta34 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta35:*:*:*:*:*:* Versions 2.2.0 beta35 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta36:*:*:*:*:*:* Versions 2.2.0 beta36 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta37:*:*:*:*:*:* Versions 2.2.0 beta37 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta38:*:*:*:*:*:* Versions 2.2.0 beta38 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta39:*:*:*:*:*:* Versions 2.2.0 beta39 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta4:*:*:*:*:*:* Versions 2.2.0 beta4 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta40:*:*:*:*:*:* Versions 2.2.0 beta40 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta41:*:*:*:*:*:* Versions 2.2.0 beta41 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta42:*:*:*:*:*:* Versions 2.2.0 beta42 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta43:*:*:*:*:*:* Versions 2.2.0 beta43 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta44:*:*:*:*:*:* Versions 2.2.0 beta44 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta45:*:*:*:*:*:* Versions 2.2.0 beta45 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta46:*:*:*:*:*:* Versions 2.2.0 beta46 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta47:*:*:*:*:*:* Versions 2.2.0 beta47 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta48:*:*:*:*:*:* Versions 2.2.0 beta48 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta49:*:*:*:*:*:* Versions 2.2.0 beta49 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta5:*:*:*:*:*:* Versions 2.2.0 beta5 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta50:*:*:*:*:*:* Versions 2.2.0 beta50 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta51:*:*:*:*:*:* Versions 2.2.0 beta51 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta52:*:*:*:*:*:* Versions 2.2.0 beta52 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta53:*:*:*:*:*:* Versions 2.2.0 beta53 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta54:*:*:*:*:*:* Versions 2.2.0 beta54 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta55:*:*:*:*:*:* Versions 2.2.0 beta55 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta56:*:*:*:*:*:* Versions 2.2.0 beta56 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta57:*:*:*:*:*:* Versions 2.2.0 beta57 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta58:*:*:*:*:*:* Versions 2.2.0 beta58 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta59:*:*:*:*:*:* Versions 2.2.0 beta59 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta6:*:*:*:*:*:* Versions 2.2.0 beta6 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta60:*:*:*:*:*:* Versions 2.2.0 beta60 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta61:*:*:*:*:*:* Versions 2.2.0 beta61 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta62:*:*:*:*:*:* Versions 2.2.0 beta62 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta63:*:*:*:*:*:* Versions 2.2.0 beta63 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta64:*:*:*:*:*:* Versions 2.2.0 beta64 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta65:*:*:*:*:*:* Versions 2.2.0 beta65 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta66:*:*:*:*:*:* Versions 2.2.0 beta66 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta67:*:*:*:*:*:* Versions 2.2.0 beta67 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta68:*:*:*:*:*:* Versions 2.2.0 beta68 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta7:*:*:*:*:*:* Versions 2.2.0 beta7 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta8:*:*:*:*:*:* Versions 2.2.0 beta8 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.0:beta9:*:*:*:*:*:* Versions 2.2.0 beta9 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.1:*:*:*:*:*:*:* Versions 2.2.1 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.2:*:*:*:*:*:*:* Versions 2.2.2 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.3:*:*:*:*:*:*:* Versions 2.2.3 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.4:*:*:*:*:*:*:* Versions 2.2.4 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.5:*:*:*:*:*:*:* Versions 2.2.5 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.6:*:*:*:*:*:*:* Versions 2.2.6 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.7:*:*:*:*:*:*:* Versions 2.2.7 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.8:*:*:*:*:*:*:* Versions 2.2.8 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.9:*:*:*:*:*:*:* Versions 2.2.9 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.10:*:*:*:*:*:*:* Versions 2.2.10 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.11:*:*:*:*:*:*:* Versions 2.2.11 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.12:*:*:*:*:*:*:* Versions 2.2.12 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.13:*:*:*:*:*:*:* Versions 2.2.13 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.14:*:*:*:*:*:*:* Versions 2.2.14 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.15:*:*:*:*:*:*:* Versions 2.2.15 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.16:*:*:*:*:*:*:* Versions 2.2.16 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.17:*:*:*:*:*:*:* Versions 2.2.17 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.18:*:*:*:*:*:*:* Versions 2.2.18 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.19:*:*:*:*:*:*:* Versions 2.2.19 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.20:*:*:*:*:*:*:* Versions 2.2.20 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.21:*:*:*:*:*:*:* Versions 2.2.21 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.22:*:*:*:*:*:*:* Versions 2.2.22 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.23:*:*:*:*:*:*:* Versions 2.2.23 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.24:*:*:*:*:*:*:* Versions 2.2.24 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.25:*:*:*:*:*:*:* Versions 2.2.25 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.26:*:*:*:*:*:*:* Versions 2.2.26 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.27:*:*:*:*:*:*:* Versions 2.2.27 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.28:*:*:*:*:*:*:* Versions 2.2.28 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.29:*:*:*:*:*:*:* Versions 2.2.29 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.30:*:*:*:*:*:*:* Versions 2.2.30 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.32:*:*:*:*:*:*:* Versions 2.2.32 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.33:*:*:*:*:*:*:* Versions 2.2.33 Vulnerable ·pmwiki
  • cpe:2.3:a:pmwiki:pmwiki:2.2.34:*:*:*:*:*:*:* Versions 2.2.34 Vulnerable ·pmwiki

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2011-4453
  2. 2026-10-03 Alias added: GHSA-w4rg-9v64-h6w4

References

Exploit 3

  • TI-2006-02748 Cross-site scripting (XSS) vulnerability in (1) uploads.php and (2) "url links" in PmWiki… CVSS 2.0MEDIUM 6.8
  • TI-2010-04385 PmWiki before 2.2.21 has XSS. CVSS 3.1MEDIUM 6.1
  • TI-2006-00465 pmwiki.php in PmWiki 2.1 beta 20, with register_globals enabled, allows remote attackers… CVSS 2.0MEDIUM 4.3
  • TI-2005-03643 Cross-site scripting (XSS) vulnerability in the Search module in PmWiki up to 2.0.12… CVSS 2.0MEDIUM 4.3
  • TI-2010-04471 Cross-site scripting (XSS) vulnerability in pmwiki.php in PmWiki 2.2.20 allows remote… CVSS 2.0MEDIUM 4.3
  • TI-2006-04301 Cross-site scripting (XSS) vulnerability in PmWiki before 2.1.18 allows remote attackers… CVSS 2.0MEDIUM 4.3
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences