CVE-2011-4451

libs/Wakka.class.php in WikkaWiki 1.3.1 and 1.3.2, when the spam_logging option is enabled, allows remote attackers to write arbitrary PHP code to the…

published September 5, 2012

CVSS

—

EPSS

14%

Percentile

96.6

In the wild

Unconfirmed

What it is

libs/Wakka.class.php in WikkaWiki 1.3.1 and 1.3.2, when the spam_logging option is enabled, allows remote attackers to write arbitrary PHP code to the spamlog_path file via the User-Agent HTTP header in an addcomment request. NOTE: the vendor disputes this issue because the rendering of the spamlog_path file never uses the PHP interpreter

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.14170 · 96.6th percentile
Published: 2012-09-05T20:00Z

EPSS history

Timeline

05 SEP 20:00Z
libs/Wakka.class.php in WikkaWiki 1.3.1 and 1.3.2, when the spam_logging option is enabled, allows remote attackers to write arbitrary PHP code to the…
cvelistv5