CVE-2011-4558

CVE-2011-4558 describes a critical remote code execution vulnerability affecting Tiki 8.2 and earlier versions. This flaw allows authenticated remote administrators to execute arbitrary PHP code by injecting crafted input into the regexres and regex parameters. With a CVSS score of 7.2 (HIGH) and a FAUCET Risk Score of 89/100, the vulnerability presents a significant risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an exploit (EDB-18265) is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.