CVE-2011-4825 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 39.2% (pctl 99)
Patch early
A public exploit exists.
Description
Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allows remote attackers to inject arbitrary PHP code into data.php via crafted parameters.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 39.16% — more likely to be exploited than 99% of all CVEs |
| Weakness | CWE-94 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2011-12-15 |
| Last modified | 2026-06-16 |
Affected (3)
| Vendor | Product |
|---|---|
| phpletter | ajax file and image manager |
| phpmyfaq | phpmyfaq |
| tinymce | tinymce |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Log1 CMS - 'writeInfo()' PHP Code Injection (Metasploit) | 2012-06-03 |
| exploit-db | Log1 CMS 2.0 - 'ajax_create_folder.php' Remote Code Execution | 2011-11-24 |
| exploit-db | ZenPhoto 1.4.1.4 - 'ajax_create_folder.php' Remote Code Execution | 2011-11-05 |
| exploit-db | PHPMyFAQ 2.7.0 - 'ajax_create_folder.php' Remote Code Execution | 2011-11-05 |
| exploit-db | aidiCMS 3.55 - 'ajax_create_folder.php' Remote Code Execution | 2011-11-05 |
| exploit-db | Ajax File and Image Manager 1.0 Final - Remote Code Execution | 2011-11-04 |
References
- http://www.exploit-db.com/exploits/18075
- http://www.phpletter.com/en/DOWNLOAD/1/
- http://www.phpmyfaq.de/advisory_2011-10-25.php
- http://www.securityfocus.com/bid/50523
- http://www.zenphoto.org/trac/ticket/2005
- http://www.exploit-db.com/exploits/18075
- http://www.phpletter.com/en/DOWNLOAD/1/
- http://www.phpmyfaq.de/advisory_2011-10-25.php
- http://www.securityfocus.com/bid/50523
- http://www.zenphoto.org/trac/ticket/2005
→ the Explorer · watch your stack · NVD