SecuritySpace - CVE-2011-4825

Vulnerability Search		Search 324607 CVE descriptions and 146377 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2011-4825

Description: Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allows remote attackers to inject arbitrary PHP code into data.php via crafted parameters.

Test IDs: 1.3.6.1.4.1.25623.1.0.103496 1.3.6.1.4.1.25623.1.0.103334

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2011-4825
BugTraq ID: 50523
http://www.securityfocus.com/bid/50523
http://www.exploit-db.com/exploits/18075

CVE ID:	CVE-2011-4825
Description:	Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allows remote attackers to inject arbitrary PHP code into data.php via crafted parameters.
Test IDs:	1.3.6.1.4.1.25623.1.0.103496 1.3.6.1.4.1.25623.1.0.103334
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-4825 BugTraq ID: 50523 http://www.securityfocus.com/bid/50523 http://www.exploit-db.com/exploits/18075