Security Advisory

CVE-2011-4825

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-12-15 02:00:00

Last updated 2024-09-17 00:46:26

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allows remote attackers to inject arbitrary PHP code into data.php via crafted parameters.

← Browse all CVEs View on cve.org ↗