Hi, A pmwiki exploit is reported here: http://isc.sans.org/diary.php?storyid=1672 it appears only to affect systems with register_globals on Regards, Simone