Joachim Durchholz schrieb: > The good news (beyond the register_globals hack) is that it isn't > reported for PmWiki above 2.1.19. Silly me - *slap* - that's for not reading the announcements. PM has announced fixes for this vulnerability for PmWiki 2.1.21. Which means that 2.1.20 probably isn't safe. Regards, Jo