CVE-2011-4825

Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allows remote attackers to inject arbitrary PHP code into data.php via crafted parameters.
Code Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 99%
VendorProductVersion
phpletterajax_file_and_image_manager
𝑥
≤ 1.0
phpletterajax_file_and_image_manager
0.5
phpletterajax_file_and_image_manager
0.5.5
phpletterajax_file_and_image_manager
0.5.7
phpletterajax_file_and_image_manager
0.6
phpletterajax_file_and_image_manager
0.6.12
phpletterajax_file_and_image_manager
0.7.8
phpletterajax_file_and_image_manager
0.7.10
phpletterajax_file_and_image_manager
0.8
phpletterajax_file_and_image_manager
0.8.8
phpletterajax_file_and_image_manager
0.8.9
phpletterajax_file_and_image_manager
0.8.24
phpletterajax_file_and_image_manager
0.9
phpletterajax_file_and_image_manager
1.0:beta1
phpletterajax_file_and_image_manager
1.0:beta2
phpletterajax_file_and_image_manager
1.0:rc1
phpletterajax_file_and_image_manager
1.0:rc2
phpletterajax_file_and_image_manager
1.0:rc3
phpletterajax_file_and_image_manager
1.0:rc4
phpletterajax_file_and_image_manager
1.0:rc5
phpmyfaqphpmyfaq
2.6.0
phpmyfaqphpmyfaq
2.6.1
phpmyfaqphpmyfaq
2.6.2
phpmyfaqphpmyfaq
2.6.3
phpmyfaqphpmyfaq
2.6.4
phpmyfaqphpmyfaq
2.6.5
phpmyfaqphpmyfaq
2.6.6
phpmyfaqphpmyfaq
2.6.7
phpmyfaqphpmyfaq
2.6.8
phpmyfaqphpmyfaq
2.6.9
phpmyfaqphpmyfaq
2.6.10
phpmyfaqphpmyfaq
2.6.11
phpmyfaqphpmyfaq
2.6.12
phpmyfaqphpmyfaq
2.6.13
phpmyfaqphpmyfaq
2.6.14
phpmyfaqphpmyfaq
2.6.15
phpmyfaqphpmyfaq
2.6.16
phpmyfaqphpmyfaq
2.6.17
phpmyfaqphpmyfaq
2.6.18
phpmyfaqphpmyfaq
2.7.0
tinymcetinymce
𝑥
≤ 1.4.1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
tinymce
oneiric
not-affected
natty
not-affected
maverick
not-affected
lucid
not-affected
hardy
not-affected
tinymce2
oneiric
not-affected
natty
not-affected
maverick
not-affected
lucid
not-affected
hardy
dne
Common Weakness Enumeration
References
http://www.exploit-db.com/exploits/18075
http://www.phpletter.com/en/DOWNLOAD/1/
http://www.phpmyfaq.de/advisory_2011-10-25.php
http://www.securityfocus.com/bid/50523
http://www.zenphoto.org/trac/ticket/2005
http://www.exploit-db.com/exploits/18075
http://www.phpletter.com/en/DOWNLOAD/1/
http://www.phpmyfaq.de/advisory_2011-10-25.php
http://www.securityfocus.com/bid/50523
http://www.zenphoto.org/trac/ticket/2005