Beveiligingsadvies

CVE-2011-4825

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2011-12-15 02:00:00

Laatst bijgewerkt 2024-09-17 00:46:26

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allows remote attackers to inject arbitrary PHP code into data.php via crafted parameters.

← Alle CVE's bekijken Bekijk op cve.org ↗