Description

Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allows remote attackers to inject arbitrary PHP code into data.php via crafted parameters.

Remediation

References

CVE-2011-4825

Related Vulnerabilities

Internet Information Services Other Vulnerability (CVE-2002-0150)

PHP-Fusion URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-23182)

Oracle Application Server CVE-2008-2583 Vulnerability (CVE-2008-2583)

SugarCRM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-17319)

Magento CVE-2019-7915 Vulnerability (CVE-2019-7915)

Severity

High

Classification

CVE-2011-4825 CWE-94

Tags

Missing Update Known Vulnerabilities