CVE

Id
52737  
CVE No.
CVE-2011-4825  
Status
Candidate  
Description
Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allows remote attackers to inject arbitrary PHP code into data.php via crafted parameters.  
Phase
Assigned (20111214)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
560075 52737 CVE-2011-4825 EXPLOIT-DB:18075  View
560076 52737 CVE-2011-4825 URL:http://www.exploit-db.com/exploits/18075  View
560077 52737 CVE-2011-4825 CONFIRM:http://www.phpletter.com/en/DOWNLOAD/1/  View
560078 52737 CVE-2011-4825 CONFIRM:http://www.phpmyfaq.de/advisory_2011-10-25.php  View
560079 52737 CVE-2011-4825 CONFIRM:http://www.zenphoto.org/trac/ticket/2005  View
560080 52737 CVE-2011-4825 BID:50523  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33157 JVNDB-2011-003397 Joomla! 用 Barter Sites の com_listing コンポーネントにおけるクロスサイトスクリプティングの脆弱性 Joomla! 用 Barter Sites の com_listing コンポーネントには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-4830 52737 3.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003397.html  View