CVE-2011-4825: Code Injection
Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allows remote attackers to inject arbitrary PHP code into data.php via crafted parameters.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4825?
CVE-2011-4825 has a moderate severity allowing for arbitrary PHP code injection.
How do I fix CVE-2011-4825?
To fix CVE-2011-4825, upgrade to the patched versions of Ajax File and Image Manager or phpMyFAQ specified in the advisory.
What software is affected by CVE-2011-4825?
CVE-2011-4825 affects Ajax File and Image Manager versions prior to 1.1, and specific versions of TinyMCE and phpMyFAQ.
Can CVE-2011-4825 be exploited remotely?
Yes, CVE-2011-4825 can be exploited remotely by attackers to inject arbitrary PHP code.
Is there a public exploit available for CVE-2011-4825?
While there may be discussions about the vulnerability, it is advised to check security forums and advisories for details rather than look for specific public exploits.