PT-2005-5268 · Tinymce · Tinymce Compressor Php
Irk4Z
·
Publicado
2005-12-31
·
Atualizado
2018-10-19
·
CVE-2005-4600
CVSS v2.0
6.4
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
TinyMCE Compressor PHP versions prior to 1.06
Description
The issue allows remote attackers to read or include arbitrary files via a trailing null byte (%00) in the
theme, language, plugins, or lang parameter. This can be exploited by sending a specially crafted request to the vulnerable API endpoint.Recommendations
For versions prior to 1.06, update to version 1.06 or later to resolve the issue. As a temporary workaround, consider restricting access to the
tiny mce gzip.php file to minimize the risk of exploitation. Avoid using the theme, language, plugins, or lang parameter with a trailing null byte (%00) in the affected API endpoint until the issue is resolved.Exploit
Correção
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Tinymce Compressor Php