CVE-2011-4453

This Metasploit module exploits a PHP code injection vulnerability in PmWiki versions 2.0.0 to 2.2.34 via the pagelist function. It injects a base64-encoded payload through a crafted HTTP header and executes arbitrary PHP code.

This exploit leverages a PHP code injection vulnerability in PmWiki's pagelist directive (CVE-2011-4453) by injecting arbitrary code via the 'order' parameter, which is then executed via create_function(). It establishes a pseudo-shell for remote command execution.

This Metasploit module exploits a PHP code injection vulnerability in PmWiki's pagelist.php (CVE-2011-4453) by injecting a base64-encoded payload via HTTP headers and triggering execution through a crafted pagelist directive.