Pmwiki vulnerabilities
7 known vulnerabilities affecting pmwiki/pmwiki.
Total CVEs
7
CISA KEV
0
Public exploits
3
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM5LOW1
Vulnerabilities
Page 1 of 1
CVE-2011-4453P2HIGHCVSS 7.5PoCv2.0.0v2.0.1+74 more2011-12-22
CVE-2011-4453 [HIGH] CWE-94 CVE-2011-4453: The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attacker
The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitrary code via PHP sequences in a crafted order parameter in a pagelist directive, leading to unintended use of the PHP create_function function.
nvd
CVE-2006-0479P4MEDIUMCVSS 4.3PoCv2.1_beta_202006-01-31
CVE-2006-0479 [MEDIUM] CVE-2006-0479: pmwiki.php in PmWiki 2.1 beta 20, with register_globals enabled, allows remote attackers to bypass p
pmwiki.php in PmWiki 2.1 beta 20, with register_globals enabled, allows remote attackers to bypass protection mechanisms that deregister global variables by setting both a GPC variable and a GLOBALS[] variable with the same name, which causes PmWiki to unset the GLOBALS[] variable but not the GPC variable, which creates resultant vulnerabilities such as remot
nvd
CVE-2005-3849P4MEDIUMCVSS 4.3PoC≤ 2.0.12v2.0.0+11 more2005-11-27
CVE-2005-3849 [MEDIUM] CVE-2005-3849: Cross-site scripting (XSS) vulnerability in the Search module in PmWiki up to 2.0.12 allows remote a
Cross-site scripting (XSS) vulnerability in the Search module in PmWiki up to 2.0.12 allows remote attackers to inject arbitrary web script or HTML via the q parameter.
nvd
CVE-2006-2840P4MEDIUMCVSS 6.8≤ 2.1.6v2.0.0+19 more2006-06-06
CVE-2006-2840 [MEDIUM] CVE-2006-2840: Cross-site scripting (XSS) vulnerability in (1) uploads.php and (2) "url links" in PmWiki 2.1.6 and
Cross-site scripting (XSS) vulnerability in (1) uploads.php and (2) "url links" in PmWiki 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
nvd
CVE-2010-4748P4MEDIUMCVSS 4.3v2.2.202011-03-01
CVE-2010-4748 [MEDIUM] CWE-79 CVE-2010-4748: Cross-site scripting (XSS) vulnerability in pmwiki.php in PmWiki 2.2.20 allows remote attackers to i
Cross-site scripting (XSS) vulnerability in pmwiki.php in PmWiki 2.2.20 allows remote attackers to inject arbitrary web script or HTML via the from parameter to Main/WikiSandbox. NOTE: some of these details are obtained from third party information.
nvd
CVE-2006-4453P4MEDIUMCVSS 4.3v2.1.0v2.1.1+16 more2006-08-30
CVE-2006-4453 [MEDIUM] CVE-2006-4453: Cross-site scripting (XSS) vulnerability in PmWiki before 2.1.18 allows remote attackers to inject a
Cross-site scripting (XSS) vulnerability in PmWiki before 2.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "table markups".
nvd
CVE-2010-1481P4LOWCVSS 3.5v2.2.152010-05-12
CVE-2010-1481 [LOW] CWE-79 CVE-2010-1481: Cross-site scripting (XSS) vulnerability in the table feature in PmWiki 2.2.15 allows remote authent
Cross-site scripting (XSS) vulnerability in the table feature in PmWiki 2.2.15 allows remote authenticated users to inject arbitrary web script or HTML via the width attribute.
nvd