CVE-2011-4825

Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before…

published December 15, 2011

CVSS

—

EPSS

39%

Percentile

98.6

In the wild

Unconfirmed

What it is

Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allows remote attackers to inject arbitrary PHP code into data.php via crafted parameters.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.39162 · 98.6th percentile
Published: 2011-12-15T02:00Z

EPSS history

Timeline

15 DEC 02:00Z
Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before…
cvelistv5