NVD

Id
11163  
Name
CVE-2011-4825  
Description
Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allows remote attackers to inject arbitrary PHP code into data.php via crafted parameters.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-12-14  
Modified Date
2011-12-15  
Seq
2011-4825  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
61868 11163 CVE-2011-4825 18075  View
61869 11163 CVE-2011-4825 http://www.phpletter.com/en/DOWNLOAD/1/  View
61870 11163 CVE-2011-4825 http://www.phpmyfaq.de/advisory_2011-10-25.php  View
61871 11163 CVE-2011-4825 50523  View
61872 11163 CVE-2011-4825 http://www.zenphoto.org/trac/ticket/2005  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33167 JVNDB-2011-003407 複数の製品で使用される inc/function.base.php における PHP コードを挿入される脆弱性 TinyMCE、phpMyFAQ およびその他の製品で使用される Ajax File and Image Manager の inc/function.base.php には、PHP コードを挿入される脆弱性が存在します。 CVE-2011-4825 52732 CVE-2011-4825 11163 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003407.html 2011-10-25 2011-12-19 View