NVD

Id
11407  
Name
CVE-2011-5147  
Description
Static code injection vulnerability in ajax_save_name.php in the Ajax File Manager module in the tinymce plugin in FreeWebshop 2.2.9 R2 and earlier allows remote attackers to inject arbitrary PHP code into data.php via the selected document, as demonstrated by a call to ajax_file_cut.php and then to ajax_save_name.php.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2012-08-31  
Modified Date
2013-09-12  
Seq
2011-5147  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
62809 11407 CVE-2011-5147 18121  View
62810 11407 CVE-2011-5147 http://www.freewebshop.org/forum/index.php?topic=5235.0  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28346 JVNDB-2012-004053 FreeWebshop の tinymce プラグインにおける任意の PHP コードを実行される脆弱性 FreeWebshop の tinymce プラグインの Ajax File Manager モジュール内の ajax_save_name.php には、静的コードの挿入により、data.php 内の任意の PHP コードを実行される脆弱性が存在します。 CVE-2011-5147 53054 CVE-2011-5147 11407 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004053.html 2012-08-31 2012-09-05 View