@media(max-width:760px){.site-header{position:static;height:auto}.nav-shell{flex-wrap:wrap;height:auto;padding:12px 0}.nav-toggle{display:none}.nav-panel{position:static;display:flex;flex:0 0 100%;padding:10px 0 0;border:0;box-shadow:none}.nav-links a{min-height:42px}}

Public exploit · Metasploit Module

PmWiki pagelist.php Remote PHP Code Injection Exploit

Published 09 November 2011Rocco Calvi

Exploit summary

This module exploits an arbitrary command execution vulnerability in PmWiki versions 2.0.0 to 2.2.34. The vulnerable function is inside /scripts/pagelist.php, allowing remote PHP code injection and execution.

Source & references

Rapid7 Module