Tinymcpuk 0.3 Cross Site Scripting Vulnerability

Tinymcpuk version 0.3 suffers from a cross site scripting vulnerability. Exploit Title: tinymcpuk xss vulnerability Google Dork: n/a Date: 1/12/2012 GMT+7 Exploit Author: eidelweiss @randyarios Vendor Homepage: http://sourceforge.net/projects/p4a/files/tinymcpuk/ Software Link:...

CVE-2006-3362

Unrestricted file upload in connectors/php/connector.php of FCKeditor mcpuk file manager enables remote PHP code execution. Affected products include Geeklog 1.4.0 through 1.4.0sr3, toendaCMS 1.0.0 Shizouka Stable and earlier, and WeBid 0.5.4, on Apache with mod_mime. The vulnerability stems from...

CVE-2006-3362

Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in 1 Geeklog 1.4.0 through 1.4.0sr3, 2 toendaCMS 1.0.0 Shizouka Stable and earlier, 3 WeBid 0.5.4, and possibly other products, when installed on Apache with modmime, allows remote...