PatchTheCVEphpwiki project vulnerabilities
Recent CVEs affecting phpwiki project products. 2 tracked.
phpwiki project has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2017-04-29. Highest priority: CVE-2017-7981 (score 60/100).
- CVE-2017-7981 HIGH 8.8 UPGRADE DOWNGRADE Tuleap before 9.7 allows command injection via the PhpWiki 1.3.10 SyntaxHighlighter plugin
- CVE-2014-5519 HIGH 7.5 DOWNGRADE The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacter
FAQ
How do I fix phpwiki project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is phpwiki project being exploited right now?
None of the tracked phpwiki project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which phpwiki project CVE should I patch first?
CVE-2017-7981 currently ranks highest (60/100): Tuleap before 9.7 allows command injection via the PhpWiki 1.3.10 SyntaxHighlighter plugin.