Summary
Ajax File and Image Manager is prone to a remote PHP code-injection vulnerability.
An attacker can exploit this issue to inject and execute arbitrary PHP code in the context of the affected application. This may facilitate a compromise of the application and the underlying system other attacks
are also possible.
Ajax File and Image Manager 1.0 is vulnerable
other versions may also
be affected.
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2011-4825 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities
- Apache Tomcat Windows Installer Privilege Escalation Vulnerability
- Atmail Multiple Unspecified Security Vulnerabilities.
- ArticleSetup Multiple Cross-Site Scripting and SQL Injection Vulnerabilities
- Acute Control Panel SQL Injection Vulnerability and Remote File Include Vulnerability
- Allegro RomPager `Misfortune Cookie` Vulnerability