Unrated severityNVD Advisory· Published Sep 11, 2014· Updated Jun 17, 2026

CVE-2014-5519

Description

The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a device option in the edit[content] parameter to index.php/HeIp. NOTE: some of these details are obtained from third party information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Phpwiki/Phpwiki2 versions
cpe:2.3:a:phpwiki_project:phpwiki:1.5.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:phpwiki_project:phpwiki:1.5.0:*:*:*:*:*:*:*
- (no CPE)range: =1.5.0

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/128031/PhpWiki-Ploticus-Command-Injection.htmlnvdExploit
seclists.org/fulldisclosure/2014/Aug/77nvdExploit
seclists.org/oss-sec/2014/q3/456nvdExploit
seclists.org/oss-sec/2014/q3/465nvdExploit
www.exploit-db.com/exploits/34451nvdExploit
osvdb.org/show/osvdb/110576nvd
secunia.com/advisories/60293nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.052
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000