CVE-2011-4908

CVE-2011-4908 affects the TinyBrowser plugin for Joomla! prior to 1.5.13, where the upload.php endpoint allows arbitrary file uploads. The root cause is insecure file upload handling in the TinyBrowser component (Joomla! 1.5.x series), enabling an attacker to place arbitrary files on the server. ...

CVE-2011-4906

CVE-2011-4906 concerns a vulnerability in the TinyMCE 3.0 editor integrated into Joomla! prior to 1.5.13. The connected documents confirm that an improper file upload mechanism could allow arbitrary PHP code execution via the TinyMCE-based upload path, enabling an attacker to execute code remotel...