CVE-2014-5519

Name of the Vulnerable Software and Affected Versions PhpWiki version 1.5.0

Description The issue allows remote attackers to execute arbitrary code via shell metacharacters in a device option in the edit[content] parameter to "index.php/HeIp".

Recommendations For PhpWiki version 1.5.0, avoid using the edit[content] parameter in the "index.php/HeIp" endpoint until the issue is resolved. As a temporary workaround, consider restricting access to the Ploticus module to minimize the risk of exploitation.