Static Code Injection Vulnerability in Ajax File and Image Manager by Open Source Project
CVE-2011-4825
Currently unrated
Key Information:
- Vendor
PHPletter
- Vendor
- CVE Published:
- 15 December 2011
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 39%
What is CVE-2011-4825?
The static code injection vulnerability in the Ajax File and Image Manager allows remote attackers to exploit crafted parameters to inject arbitrary PHP code into the data.php file. This can lead to unauthorized manipulation of the server environment, potentially compromising sensitive data and application integrity. The vulnerability impacts various applications using this manager, including TinyMCE and different versions of phpMyFAQ, thereby broadening the attack surface for potential exploits.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.