Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 12/02/2020 Updated: 25/02/2020

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Tiny browser in TinyMCE 3.0 editor in Joomla! prior to 1.5.13 allows file upload and arbitrary PHP code execution.

Vulnerable Product	Search on Vulmon	Subscribe to Product
tiny tinybrowser

<?php /** ** Joomla 1512 Remote Code Execution via TinyMCE upload vulnerability ** ** Tested against : ** - Joomla 1512 / Ubuntu 810 / Apache 229 ** - Joomla 1512 / Windows XP SP2 / Apache 2212 ** ** Luca "daath" De Fulgentis - daath [at] nibblesecorg ** blognibblesecorg ** **/ /* daath@shaytan:~$ php pwnoomla ...

CWE-434 https://www.openwall.com/lists/oss-security/2011/12/25/7 https://developer.joomla.org/security/news/301-20090722-core-file-upload.html https://www.exploit-db.com/exploits/10183 https://nvd.nist.gov https://www.exploit-db.com/exploits/10183/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2011-4906

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect