CVE-2011-4825
aidiCMS 3.55 - 'ajax_create_folder.php' Remote Code Execution
Severity Score
7.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
9
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allows remote attackers to inject arbitrary PHP code into data.php via crafted parameters.
Vulnerabilidad de inyección de código estático en inc/function.base.php de Ajax File y Image Manager en versiones anteriores a 1.1, tal como se usa en tinymce en versiones anteriores a 1.4.2, phpMyFAQ 2.6 anteriores a 2.6.19 y 2.7 anteriores a 2.7.1, y posiblemente otros productos, permite a atacantes remotos inyectar código arbitrario PHP en data.php a través de parámetros modificados.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-04-11 First Exploit
- 2011-12-14 CVE Reserved
- 2011-12-15 CVE Published
- 2024-09-17 CVE Updated
- 2024-09-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-94: Improper Control of Generation of Code ('Code Injection')
CAPEC
References (12)
| URL | Tag | Source |
|---|---|---|
| http://www.phpletter.com/en/DOWNLOAD/1 | X_refsource_confirm | |
| http://www.phpmyfaq.de/advisory_2011-10-25.php | X_refsource_confirm | |
| http://www.zenphoto.org/trac/ticket/2005 | X_refsource_confirm |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/18085 | 2011-11-05 | |
| https://www.exploit-db.com/exploits/18075 | 2011-11-04 | |
| https://www.exploit-db.com/exploits/18151 | 2011-11-24 | |
| https://www.exploit-db.com/exploits/18975 | 2012-06-03 | |
| https://www.exploit-db.com/exploits/18084 | 2011-11-05 | |
| https://www.exploit-db.com/exploits/18083 | 2011-11-05 | |
| http://www.exploit-db.com/exploits/18075 | 2024-09-17 | |
| http://www.securityfocus.com/bid/50523 | 2024-09-17 | |
| https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/log1cms_ajax_create_folder.rb | 2011-04-11 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Phpletter Search vendor "Phpletter" | Ajax File And Image Manager Search vendor "Phpletter" for product "Ajax File And Image Manager" | <= 1.0 Search vendor "Phpletter" for product "Ajax File And Image Manager" and version " <= 1.0" | - |
Affected
| ||||||
| Phpletter Search vendor "Phpletter" | Ajax File And Image Manager Search vendor "Phpletter" for product "Ajax File And Image Manager" | 0.5 Search vendor "Phpletter" for product "Ajax File And Image Manager" and version "0.5" | - |
Affected
| ||||||
| Phpletter Search vendor "Phpletter" | Ajax File And Image Manager Search vendor "Phpletter" for product "Ajax File And Image Manager" | 0.5.5 Search vendor "Phpletter" for product "Ajax File And Image Manager" and version "0.5.5" | - |
Affected
| ||||||
| Phpletter Search vendor "Phpletter" | Ajax File And Image Manager Search vendor "Phpletter" for product "Ajax File And Image Manager" | 0.5.7 Search vendor "Phpletter" for product "Ajax File And Image Manager" and version "0.5.7" | - |
Affected
| ||||||
| Phpletter Search vendor "Phpletter" | Ajax File And Image Manager Search vendor "Phpletter" for product "Ajax File And Image Manager" | 0.6 Search vendor "Phpletter" for product "Ajax File And Image Manager" and version "0.6" | - |
Affected
| ||||||
| Phpletter Search vendor "Phpletter" | Ajax File And Image Manager Search vendor "Phpletter" for product "Ajax File And Image Manager" | 0.6.12 Search vendor "Phpletter" for product "Ajax File And Image Manager" and version "0.6.12" | - |
Affected
| ||||||
| Phpletter Search vendor "Phpletter" | Ajax File And Image Manager Search vendor "Phpletter" for product "Ajax File And Image Manager" | 0.7.8 Search vendor "Phpletter" for product "Ajax File And Image Manager" and version "0.7.8" | - |
Affected
| ||||||
| Phpletter Search vendor "Phpletter" | Ajax File And Image Manager Search vendor "Phpletter" for product "Ajax File And Image Manager" | 0.7.10 Search vendor "Phpletter" for product "Ajax File And Image Manager" and version "0.7.10" | - |
Affected
| ||||||
| Phpletter Search vendor "Phpletter" | Ajax File And Image Manager Search vendor "Phpletter" for product "Ajax File And Image Manager" | 0.8 Search vendor "Phpletter" for product "Ajax File And Image Manager" and version "0.8" | - |
Affected
| ||||||
| Phpletter Search vendor "Phpletter" | Ajax File And Image Manager Search vendor "Phpletter" for product "Ajax File And Image Manager" | 0.8.8 Search vendor "Phpletter" for product "Ajax File And Image Manager" and version "0.8.8" | - |
Affected
| ||||||
| Phpletter Search vendor "Phpletter" | Ajax File And Image Manager Search vendor "Phpletter" for product "Ajax File And Image Manager" | 0.8.9 Search vendor "Phpletter" for product "Ajax File And Image Manager" and version "0.8.9" | - |
Affected
| ||||||
| Phpletter Search vendor "Phpletter" | Ajax File And Image Manager Search vendor "Phpletter" for product "Ajax File And Image Manager" | 0.8.24 Search vendor "Phpletter" for product "Ajax File And Image Manager" and version "0.8.24" | - |
Affected
| ||||||
| Phpletter Search vendor "Phpletter" | Ajax File And Image Manager Search vendor "Phpletter" for product "Ajax File And Image Manager" | 0.9 Search vendor "Phpletter" for product "Ajax File And Image Manager" and version "0.9" | - |
Affected
| ||||||
| Phpletter Search vendor "Phpletter" | Ajax File And Image Manager Search vendor "Phpletter" for product "Ajax File And Image Manager" | 1.0 Search vendor "Phpletter" for product "Ajax File And Image Manager" and version "1.0" | beta1 |
Affected
| ||||||
| Phpletter Search vendor "Phpletter" | Ajax File And Image Manager Search vendor "Phpletter" for product "Ajax File And Image Manager" | 1.0 Search vendor "Phpletter" for product "Ajax File And Image Manager" and version "1.0" | beta2 |
Affected
| ||||||
| Phpletter Search vendor "Phpletter" | Ajax File And Image Manager Search vendor "Phpletter" for product "Ajax File And Image Manager" | 1.0 Search vendor "Phpletter" for product "Ajax File And Image Manager" and version "1.0" | rc1 |
Affected
| ||||||
| Phpletter Search vendor "Phpletter" | Ajax File And Image Manager Search vendor "Phpletter" for product "Ajax File And Image Manager" | 1.0 Search vendor "Phpletter" for product "Ajax File And Image Manager" and version "1.0" | rc2 |
Affected
| ||||||
| Phpletter Search vendor "Phpletter" | Ajax File And Image Manager Search vendor "Phpletter" for product "Ajax File And Image Manager" | 1.0 Search vendor "Phpletter" for product "Ajax File And Image Manager" and version "1.0" | rc3 |
Affected
| ||||||
| Phpletter Search vendor "Phpletter" | Ajax File And Image Manager Search vendor "Phpletter" for product "Ajax File And Image Manager" | 1.0 Search vendor "Phpletter" for product "Ajax File And Image Manager" and version "1.0" | rc4 |
Affected
| ||||||
| Phpletter Search vendor "Phpletter" | Ajax File And Image Manager Search vendor "Phpletter" for product "Ajax File And Image Manager" | 1.0 Search vendor "Phpletter" for product "Ajax File And Image Manager" and version "1.0" | rc5 |
Affected
| ||||||
| Phpmyfaq Search vendor "Phpmyfaq" | Phpmyfaq Search vendor "Phpmyfaq" for product "Phpmyfaq" | 2.6.0 Search vendor "Phpmyfaq" for product "Phpmyfaq" and version "2.6.0" | - |
Affected
| ||||||
| Phpmyfaq Search vendor "Phpmyfaq" | Phpmyfaq Search vendor "Phpmyfaq" for product "Phpmyfaq" | 2.6.1 Search vendor "Phpmyfaq" for product "Phpmyfaq" and version "2.6.1" | - |
Affected
| ||||||
| Phpmyfaq Search vendor "Phpmyfaq" | Phpmyfaq Search vendor "Phpmyfaq" for product "Phpmyfaq" | 2.6.2 Search vendor "Phpmyfaq" for product "Phpmyfaq" and version "2.6.2" | - |
Affected
| ||||||
| Phpmyfaq Search vendor "Phpmyfaq" | Phpmyfaq Search vendor "Phpmyfaq" for product "Phpmyfaq" | 2.6.3 Search vendor "Phpmyfaq" for product "Phpmyfaq" and version "2.6.3" | - |
Affected
| ||||||
| Phpmyfaq Search vendor "Phpmyfaq" | Phpmyfaq Search vendor "Phpmyfaq" for product "Phpmyfaq" | 2.6.4 Search vendor "Phpmyfaq" for product "Phpmyfaq" and version "2.6.4" | - |
Affected
| ||||||
| Phpmyfaq Search vendor "Phpmyfaq" | Phpmyfaq Search vendor "Phpmyfaq" for product "Phpmyfaq" | 2.6.5 Search vendor "Phpmyfaq" for product "Phpmyfaq" and version "2.6.5" | - |
Affected
| ||||||
| Phpmyfaq Search vendor "Phpmyfaq" | Phpmyfaq Search vendor "Phpmyfaq" for product "Phpmyfaq" | 2.6.6 Search vendor "Phpmyfaq" for product "Phpmyfaq" and version "2.6.6" | - |
Affected
| ||||||
| Phpmyfaq Search vendor "Phpmyfaq" | Phpmyfaq Search vendor "Phpmyfaq" for product "Phpmyfaq" | 2.6.7 Search vendor "Phpmyfaq" for product "Phpmyfaq" and version "2.6.7" | - |
Affected
| ||||||
| Phpmyfaq Search vendor "Phpmyfaq" | Phpmyfaq Search vendor "Phpmyfaq" for product "Phpmyfaq" | 2.6.8 Search vendor "Phpmyfaq" for product "Phpmyfaq" and version "2.6.8" | - |
Affected
| ||||||
| Phpmyfaq Search vendor "Phpmyfaq" | Phpmyfaq Search vendor "Phpmyfaq" for product "Phpmyfaq" | 2.6.9 Search vendor "Phpmyfaq" for product "Phpmyfaq" and version "2.6.9" | - |
Affected
| ||||||
| Phpmyfaq Search vendor "Phpmyfaq" | Phpmyfaq Search vendor "Phpmyfaq" for product "Phpmyfaq" | 2.6.10 Search vendor "Phpmyfaq" for product "Phpmyfaq" and version "2.6.10" | - |
Affected
| ||||||
| Phpmyfaq Search vendor "Phpmyfaq" | Phpmyfaq Search vendor "Phpmyfaq" for product "Phpmyfaq" | 2.6.11 Search vendor "Phpmyfaq" for product "Phpmyfaq" and version "2.6.11" | - |
Affected
| ||||||
| Phpmyfaq Search vendor "Phpmyfaq" | Phpmyfaq Search vendor "Phpmyfaq" for product "Phpmyfaq" | 2.6.12 Search vendor "Phpmyfaq" for product "Phpmyfaq" and version "2.6.12" | - |
Affected
| ||||||
| Phpmyfaq Search vendor "Phpmyfaq" | Phpmyfaq Search vendor "Phpmyfaq" for product "Phpmyfaq" | 2.6.13 Search vendor "Phpmyfaq" for product "Phpmyfaq" and version "2.6.13" | - |
Affected
| ||||||
| Phpmyfaq Search vendor "Phpmyfaq" | Phpmyfaq Search vendor "Phpmyfaq" for product "Phpmyfaq" | 2.6.14 Search vendor "Phpmyfaq" for product "Phpmyfaq" and version "2.6.14" | - |
Affected
| ||||||
| Phpmyfaq Search vendor "Phpmyfaq" | Phpmyfaq Search vendor "Phpmyfaq" for product "Phpmyfaq" | 2.6.15 Search vendor "Phpmyfaq" for product "Phpmyfaq" and version "2.6.15" | - |
Affected
| ||||||
| Phpmyfaq Search vendor "Phpmyfaq" | Phpmyfaq Search vendor "Phpmyfaq" for product "Phpmyfaq" | 2.6.16 Search vendor "Phpmyfaq" for product "Phpmyfaq" and version "2.6.16" | - |
Affected
| ||||||
| Phpmyfaq Search vendor "Phpmyfaq" | Phpmyfaq Search vendor "Phpmyfaq" for product "Phpmyfaq" | 2.6.17 Search vendor "Phpmyfaq" for product "Phpmyfaq" and version "2.6.17" | - |
Affected
| ||||||
| Phpmyfaq Search vendor "Phpmyfaq" | Phpmyfaq Search vendor "Phpmyfaq" for product "Phpmyfaq" | 2.6.18 Search vendor "Phpmyfaq" for product "Phpmyfaq" and version "2.6.18" | - |
Affected
| ||||||
| Phpmyfaq Search vendor "Phpmyfaq" | Phpmyfaq Search vendor "Phpmyfaq" for product "Phpmyfaq" | 2.7.0 Search vendor "Phpmyfaq" for product "Phpmyfaq" and version "2.7.0" | - |
Affected
| ||||||
| Tinymce Search vendor "Tinymce" | Tinymce Search vendor "Tinymce" for product "Tinymce" | <= 1.4.1 Search vendor "Tinymce" for product "Tinymce" and version " <= 1.4.1" | - |
Affected
| ||||||