CVE-2011-4825 | BDVDB-2026-48476 Detail

Description#

Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allows remote attackers to inject arbitrary PHP code into data.php via crafted parameters.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.zenphoto.org/trac/ticket/2005
http://www.phpmyfaq.de/advisory_2011-10-25.php
http://www.phpletter.com/en/DOWNLOAD/1/
http://www.securityfocus.com/bid/50523
http://www.exploit-db.com/exploits/18075

Exploit#

http://www.exploit-db.com/exploits/18075

History#

Version 12011-12-15Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.