CVE-2011-4453
N/A
Published: December 22, 2011 at 03:00 PM UTC
Updated: June 16, 2026 at 11:34 PM UTC
1 product affected across 1 vendorPmwiki
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 52%
Description
The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitrary code via PHP sequences in a crafted order parameter in a pagelist directive, leading to unintended use of the PHP create_function function.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
2.0.02.0.12.0.102.0.112.0.122.0.132.0.22.0.32.0.42.0.52.0.62.0.72.0.82.0.92.1.02.1.12.1.102.1.112.1.122.1.132.1.142.1.152.1.162.1.172.1.182.1.192.1.22.1.202.1.212.1.222.1.232.1.242.1.252.1.262.1.272.1.32.1.42.1.52.1.62.1.72.1.82.1.92.2.02.2.0 beta12.2.0 beta102.2.0 beta112.2.0 beta122.2.0 beta132.2.0 beta142.2.0 beta152.2.0 beta162.2.0 beta172.2.0 beta182.2.0 beta192.2.0 beta22.2.0 beta202.2.0 beta212.2.0 beta222.2.0 beta232.2.0 beta242.2.0 beta252.2.0 beta262.2.0 beta272.2.0 beta282.2.0 beta292.2.0 beta32.2.0 beta302.2.0 beta312.2.0 beta322.2.0 beta332.2.0 beta342.2.0 beta352.2.0 beta362.2.0 beta372.2.0 beta382.2.0 beta392.2.0 beta42.2.0 beta402.2.0 beta412.2.0 beta422.2.0 beta432.2.0 beta442.2.0 beta452.2.0 beta462.2.0 beta472.2.0 beta482.2.0 beta492.2.0 beta52.2.0 beta502.2.0 beta512.2.0 beta522.2.0 beta532.2.0 beta542.2.0 beta552.2.0 beta562.2.0 beta572.2.0 beta582.2.0 beta592.2.0 beta62.2.0 beta602.2.0 beta612.2.0 beta622.2.0 beta632.2.0 beta642.2.0 beta652.2.0 beta662.2.0 beta672.2.0 beta682.2.0 beta72.2.0 beta82.2.0 beta92.2.12.2.102.2.112.2.122.2.132.2.142.2.152.2.162.2.172.2.182.2.192.2.22.2.202.2.212.2.222.2.232.2.242.2.252.2.262.2.272.2.282.2.292.2.32.2.302.2.322.2.332.2.342.2.42.2.52.2.62.2.72.2.82.2.9
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (3)
Quick Info
StatusMODIFIED
CWE
CWE-94
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card