Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Fantastico In all Version Cpanel 10.x <= local File Include

AssetMan 2.4a <= (download_pdf. php) Remote File Disclosure Vulnerability

Wiki Remote Authentication Bypass Vulnerability

Remote File Include In ClipShare.v1.5.3

From:	zeus olimpusklan <zeus.olimpusklan_(at)_gmail.com>
Date:	12.03.2007
Subject:	[Full-disclosure] TinyMCE_exp Remote File Include Vulnerability

###########################################################################
TinyMCE_exp Remote File Include Vulnerability


Author: Arturo Z.
Contact: zeus@diosdelared.com
Website: www.diosdelared.com
Date: 10/03/07
Risk: critical
Vendor Url:
http://www.joomlaya.com/index.php?option=com_remository&func=fileinfo&fil
ecatid=1868
Affected Software: TinyMCE_exp
search: allinurl: tiny_mce


example
##################################################################

http://site.com/path/mambots/editors/path/jscripts/tiny_mce/plugins/preview/previ
ew.php?mosConfig_absolute_path=

##################################################################