Back to feed
EUVD-2005-4595 · Published Dec 31, 2005
Directory traversal vulnerability in tiny_mce_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to read or include arbitrary files via a trailing null byte (%00) in the (1) theme, (2) language, (3) plugins, or (4) lang parameter.
Technologies
Moxiecode Tinymce Compressor Php
Weaknesses
CWE-22
CVSS scores
- v2.06.4
AV:N/AC:L/Au:N/C:P/I:P/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
