Description
Multiple vendor applications utilize the TinyMCE script. TinyMCE is a platform independent web based Javascript HTML WYSIWYG editor control. This plugin includes a file './plugins/ajaxfilemanager/ajax_create_folder.php' that is vulnerable to remote PHP code execution. The writeInfo() function simply writes all the $_POST content into a file called 'data.php' so an attacker can execute arbitrary PHP code.
Remediation
Upgrade TinyMCE script to the latest version or delete the ajax_create_folder.php if you don't use the AJAX file manager functionality.
References
Related Vulnerabilities
Jenkins Improper Input Validation Vulnerability (CVE-2018-1999002)
WebLogic CVE-2023-22086 Vulnerability (CVE-2023-22086)
Java Unspesificed Vulnerability (CVE-2019-2766)
Django Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2513)
Grafana URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2022-29170)