CVE-2011-4334: Labwiki Project Labwiki

High severity, CVSS 8.8. EPSS: 5.8% chance of exploitation in the next 30 days.

edit.php in LabWiki 1.1 and earlier does not properly verify uploaded user files, which allows remote authenticated users to upload arbitrary PHP files via a PHP file with a .gif extension in the userfile parameter.

Affected products

• Labwiki Project Labwiki: up to and including 1.1

Published 2017-10-23. Last modified 2026-06-16.