Lucene search

[email protected]CVE-2011-4825

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-4825

2022-10-0316:15:13

CWE-94

[email protected]

web.nvd.nist.gov

cve-2011-4825

static code injection

ajax file and image manager

tinymce

phpmyfaq

vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.969 High

EPSS

Percentile

99.7%

JSON

Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allows remote attackers to inject arbitrary PHP code into data.php via crafted parameters.

Affected configurations

NVD

Node

phpletterajax_file_and_image_managerRange≤1.0

phpletterajax_file_and_image_managerMatch0.5

phpletterajax_file_and_image_managerMatch0.5.5

phpletterajax_file_and_image_managerMatch0.5.7

phpletterajax_file_and_image_managerMatch0.6

phpletterajax_file_and_image_managerMatch0.6.12

phpletterajax_file_and_image_managerMatch0.7.8

phpletterajax_file_and_image_managerMatch0.7.10

phpletterajax_file_and_image_managerMatch0.8

phpletterajax_file_and_image_managerMatch0.8.8

phpletterajax_file_and_image_managerMatch0.8.9

phpletterajax_file_and_image_managerMatch0.8.24

phpletterajax_file_and_image_managerMatch0.9

phpletterajax_file_and_image_managerMatch1.0beta1

phpletterajax_file_and_image_managerMatch1.0beta2

phpletterajax_file_and_image_managerMatch1.0rc1

phpletterajax_file_and_image_managerMatch1.0rc2

phpletterajax_file_and_image_managerMatch1.0rc3

phpletterajax_file_and_image_managerMatch1.0rc4

phpletterajax_file_and_image_managerMatch1.0rc5

phpmyfaqphpmyfaqMatch2.6.0

phpmyfaqphpmyfaqMatch2.6.1

phpmyfaqphpmyfaqMatch2.6.2

phpmyfaqphpmyfaqMatch2.6.3

phpmyfaqphpmyfaqMatch2.6.4

phpmyfaqphpmyfaqMatch2.6.5

phpmyfaqphpmyfaqMatch2.6.6

phpmyfaqphpmyfaqMatch2.6.7

phpmyfaqphpmyfaqMatch2.6.8

phpmyfaqphpmyfaqMatch2.6.9

phpmyfaqphpmyfaqMatch2.6.10

phpmyfaqphpmyfaqMatch2.6.11

phpmyfaqphpmyfaqMatch2.6.12

phpmyfaqphpmyfaqMatch2.6.13

phpmyfaqphpmyfaqMatch2.6.14

phpmyfaqphpmyfaqMatch2.6.15

phpmyfaqphpmyfaqMatch2.6.16

phpmyfaqphpmyfaqMatch2.6.17

phpmyfaqphpmyfaqMatch2.6.18

phpmyfaqphpmyfaqMatch2.7.0

tinymcetinymceRange≤1.4.1

CPENameOperatorVersion
phpletter:ajax_file_and_image_managerphpletter ajax file and image managerle1.0
phpletter:ajax_file_and_image_managerphpletter ajax file and image managereq0.5
phpletter:ajax_file_and_image_managerphpletter ajax file and image managereq0.5.5
phpletter:ajax_file_and_image_managerphpletter ajax file and image managereq0.5.7
phpletter:ajax_file_and_image_managerphpletter ajax file and image managereq0.6
phpletter:ajax_file_and_image_managerphpletter ajax file and image managereq0.6.12
phpletter:ajax_file_and_image_managerphpletter ajax file and image managereq0.7.8
phpletter:ajax_file_and_image_managerphpletter ajax file and image managereq0.7.10
phpletter:ajax_file_and_image_managerphpletter ajax file and image managereq0.8
phpletter:ajax_file_and_image_managerphpletter ajax file and image managereq0.8.8

CPE	Name	Operator	Version
phpletter:ajax_file_and_image_manager	phpletter ajax file and image manager	le	1.0
phpletter:ajax_file_and_image_manager	phpletter ajax file and image manager	eq	0.5
phpletter:ajax_file_and_image_manager	phpletter ajax file and image manager	eq	0.5.5
phpletter:ajax_file_and_image_manager	phpletter ajax file and image manager	eq	0.5.7
phpletter:ajax_file_and_image_manager	phpletter ajax file and image manager	eq	0.6
phpletter:ajax_file_and_image_manager	phpletter ajax file and image manager	eq	0.6.12
phpletter:ajax_file_and_image_manager	phpletter ajax file and image manager	eq	0.7.8
phpletter:ajax_file_and_image_manager	phpletter ajax file and image manager	eq	0.7.10
phpletter:ajax_file_and_image_manager	phpletter ajax file and image manager	eq	0.8
phpletter:ajax_file_and_image_manager	phpletter ajax file and image manager	eq	0.8.8