high7.5Public exploit code
CVE-2011-4825
Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Log1 CMS - 'writeInfo()' PHP Code Injection (Metasploit)2012-06-03 · webapps · php · Verified
- aidiCMS 3.55 - 'ajax_create_folder.php' Remote Code Execution2011-11-05 · webapps · php · Verified
- PHPMyFAQ 2.7.0 - 'ajax_create_folder.php' Remote Code Execution2011-11-05 · webapps · php · Verified
- ZenPhoto 1.4.1.4 - 'ajax_create_folder.php' Remote Code Execution2011-11-05 · webapps · php · Verified
- Ajax File and Image Manager 1.0 Final - Remote Code Execution2011-11-04 · webapps · php · Verified
- Log1 CMS 2.0 - 'ajax_create_folder.php' Remote Code Execution2011-11-24 · webapps · php
Impact
Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allows remote attackers to inject arbitrary PHP code into data.php via crafted parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpletter | Ajax File And Image Manager | through 1.0 Versions 0.5, 0.5.5, 0.5.7, 0.6, 0.6.12 |
| Phpmyfaq | Phpmyfaq | Versions 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5 |
| Tinymce | Tinymce | through 1.4.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.exploit-db.com/exploits/18075
- http://www.phpletter.com/en/DOWNLOAD/1/
- http://www.phpmyfaq.de/advisory_2011-10-25.php
- http://www.securityfocus.com/bid/50523
- http://www.zenphoto.org/trac/ticket/2005
- http://www.exploit-db.com/exploits/18075
- http://www.phpletter.com/en/DOWNLOAD/1/
- http://www.phpmyfaq.de/advisory_2011-10-25.php
- http://www.securityfocus.com/bid/50523
- http://www.zenphoto.org/trac/ticket/2005