CVE-2005-4599

Cross-site scripting XSS vulnerability in tinymcegzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to inject arbitrary web script or HTML via the index parameter...

CVE-2005-4600

Directory traversal vulnerability in tinymcegzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to read or include arbitrary files via a trailing null byte %00 in the 1 theme, 2 language, 3 plugins, or 4 lang parameter...

CVE-2005-4600

Directory traversal vulnerability in tinymcegzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to read or include arbitrary files via a trailing null byte %00 in the 1 theme, 2 language, 3 plugins, or 4 lang parameter...

Advisory 26/2005: TinyMCE Compressor Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened-PHP Project www.hardened-php.net -= Security Advisory =- Advisory: TinyMCE Compressor Vulnerabilities Release Date: 2005/12/29 Last Modified: 2005/12/29 Author: Stefan Esser [email protected] Application: TinyMCE Compressor = 1.0.5...