What is CVE-2011-4825?

CVE-2011-4825 is a vulnerability in Phpletter Ajax File And Image Manager, classified under Code Injection. Published 2011-12-15.

Is CVE-2011-4825 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

RCE in Phpletter Ajax File And Image Manager

CVE-2011-4825

Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allows remote attackers to inject arbitrary PHP code into data.php via crafted parameters.

Vulnerability class: RCE (Remote Code Execution)

Published 2011-12-15 · last modified 2026-06-16.

CVSS v2 metric

CVSS v2 base score 7.5 (High). Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.

EPSS exploit prediction

EPSS: 0.392 (98.6th percentile), scored 2026-09-27.

Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 99th percentile — 98.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.392 · newest: 0.392 · change: 0.000

Affected products

Phpletter Ajax File And Image Manager — versions 0.5, 0.5.5, 0.5.7
Phpmyfaq — versions 2.6.0, 2.6.1, 2.6.2
Tinymce

Weakness classification (CWE)

CWE-94 — Code Injection

Public proof-of-concept exploits

References

www.zenphoto.org/trac/ticket/2005
www.phpmyfaq.de/advisory_2011-10-25.php
www.phpletter.com/en/DOWNLOAD/1/
www.securityfocus.com/bid/50523 (Exploit, vdb-entry)
www.exploit-db.com/exploits/18075 (exploit)

Frequently asked questions

What is CVE-2011-4825?: CVE-2011-4825 is a vulnerability in Phpletter Ajax File And Image Manager, classified under Code Injection. Published 2011-12-15.
Is CVE-2011-4825 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.