PatchTheCVEphpwiki vulnerabilities and fixes
Recent CVEs affecting phpwiki, with upgrade or downgrade steps. 2 tracked.
phpwiki has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2017-04-29. Highest priority: CVE-2017-7981 (score 60/100).
- CVE-2017-7981 HIGH 8.8 UPGRADE DOWNGRADE Tuleap before 9.7 allows command injection via the PhpWiki 1.3.10 SyntaxHighlighter plugin
- CVE-2014-5519 HIGH 7.5 DOWNGRADE The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacter
FAQ
How do I fix phpwiki vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is phpwiki being exploited right now?
None of the tracked phpwiki CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which phpwiki CVE should I patch first?
CVE-2017-7981 currently ranks highest (60/100): Tuleap before 9.7 allows command injection via the PhpWiki 1.3.10 SyntaxHighlighter plugin.