critical9.8Public exploit code
CVE-2011-4906
Tiny browser in TinyMCE 3.0 editor in Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! 1.5.12 TinyMCE - Remote Code Execution (via Arbitrary File Upload)2009-11-19 · webapps · php · Verified
Impact
Tiny browser in TinyMCE 3.0 editor in Joomla! before 1.5.13 allows file upload and arbitrary PHP code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tiny | Tinybrowser | before 1.5.13 |
Weakness classification
References
- NVD record
- CVE.org record
- https://developer.joomla.org/security/news/301-20090722-core-file-upload.html
- https://www.exploit-db.com/exploits/10183
- https://www.openwall.com/lists/oss-security/2011/12/25/7
- https://developer.joomla.org/security/news/301-20090722-core-file-upload.html
- https://www.exploit-db.com/exploits/10183
- https://www.openwall.com/lists/oss-security/2011/12/25/7