CVE-2011-4825 Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly o...
HighCVSS 7.5
EPSS 39.2%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allows remote attackers to inject arbitrary PHP code into data.php via crafted parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpletter ajax file and image manager | <= 1.0 | No fix listed |
| phpletter ajax file and image manager | = 0.5 | No fix listed |
| phpletter ajax file and image manager | = 0.5.5 | No fix listed |
| phpletter ajax file and image manager | = 0.5.7 | No fix listed |
| phpletter ajax file and image manager | = 0.6 | No fix listed |
| phpletter ajax file and image manager | = 0.6.12 | No fix listed |
| phpletter ajax file and image manager | = 0.7.8 | No fix listed |
| phpletter ajax file and image manager | = 0.7.10 | No fix listed |
| phpletter ajax file and image manager | = 0.8 | No fix listed |
| phpletter ajax file and image manager | = 0.8.8 | No fix listed |
| phpletter ajax file and image manager | = 0.8.9 | No fix listed |
| phpletter ajax file and image manager | = 0.8.24 | No fix listed |
| phpletter ajax file and image manager | = 0.9 | No fix listed |
| phpletter ajax file and image manager | = 1.0-beta1 | No fix listed |
| phpletter ajax file and image manager | = 1.0-beta2 | No fix listed |
| phpletter ajax file and image manager | = 1.0-rc1 | No fix listed |
| phpletter ajax file and image manager | = 1.0-rc2 | No fix listed |
| phpletter ajax file and image manager | = 1.0-rc3 | No fix listed |
| phpletter ajax file and image manager | = 1.0-rc4 | No fix listed |
| phpletter ajax file and image manager | = 1.0-rc5 | No fix listed |
| phpmyfaq/phpmyfaq | = 2.6.0 | No fix listed |
| phpmyfaq/phpmyfaq | = 2.6.1 | No fix listed |
| phpmyfaq/phpmyfaq | = 2.6.2 | No fix listed |
| phpmyfaq/phpmyfaq | = 2.6.3 | No fix listed |
| phpmyfaq/phpmyfaq | = 2.6.4 | No fix listed |
Show 16 more
| Product | Affected versions | Fixed in |
|---|---|---|
| phpmyfaq/phpmyfaq | = 2.6.5 | No fix listed |
| phpmyfaq/phpmyfaq | = 2.6.6 | No fix listed |
| phpmyfaq/phpmyfaq | = 2.6.7 | No fix listed |
| phpmyfaq/phpmyfaq | = 2.6.8 | No fix listed |
| phpmyfaq/phpmyfaq | = 2.6.9 | No fix listed |
| phpmyfaq/phpmyfaq | = 2.6.10 | No fix listed |
| phpmyfaq/phpmyfaq | = 2.6.11 | No fix listed |
| phpmyfaq/phpmyfaq | = 2.6.12 | No fix listed |
| phpmyfaq/phpmyfaq | = 2.6.13 | No fix listed |
| phpmyfaq/phpmyfaq | = 2.6.14 | No fix listed |
| phpmyfaq/phpmyfaq | = 2.6.15 | No fix listed |
| phpmyfaq/phpmyfaq | = 2.6.16 | No fix listed |
| phpmyfaq/phpmyfaq | = 2.6.17 | No fix listed |
| phpmyfaq/phpmyfaq | = 2.6.18 | No fix listed |
| phpmyfaq/phpmyfaq | = 2.7.0 | No fix listed |
| tinymce/tinymce | <= 1.4.1 | No fix listed |
References
- 18075 exploit
- www.phpletter.com
- www.phpmyfaq.de
- 50523 exploit vdb-entry
- www.zenphoto.org