CVE-2011-4453
PmWiki 2.x < 2.2.35 - Remote Code Execution via PageListSort Order Parameter
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2011-4453.
PoCs published by Metasploit, EgiX, including Metasploit module exploits/multi/http/pmwiki_pagelist.
AI-analyzed exploit summary This Metasploit module exploits a PHP code injection vulnerability in PmWiki versions 2.0.0 to 2.2.34 via the pagelist function. It injects a base64-encoded payload through a crafted HTTP header and executes arbitrary PHP code.
Description
The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitrary code via PHP sequences in a crafted order parameter in a pagelist directive, leading to unintended use of the PHP create_function function.
Exploits (3)
This Metasploit module exploits a PHP code injection vulnerability in PmWiki versions 2.0.0 to 2.2.34 via the pagelist function. It injects a base64-encoded payload through a crafted HTTP header and executes arbitrary PHP code.
This exploit leverages a PHP code injection vulnerability in PmWiki's pagelist directive (CVE-2011-4453) by injecting arbitrary code via the 'order' parameter, which is then executed via create_function(). It establishes a pseudo-shell for remote command execution.
This Metasploit module exploits a PHP code injection vulnerability in PmWiki's pagelist.php (CVE-2011-4453) by injecting a base64-encoded payload via HTTP headers and triggering execution through a crafted pagelist directive.