2 results (0.002 seconds)
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVSS: 7.5EPSS: 12%CPEs: 1EXPL: 1
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2005-4599
https://notcve.org/view.php?id=CVE-2005-4599
31 Dec 2005 — Cross-site scripting (XSS) vulnerability in tiny_mce_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to inject arbitrary web script or HTML via the index parameter. • http://secunia.com/advisories/18262 •
CVSS: 7.5EPSS: 12%CPEs: 1EXPL: 1CVE-2005-4600 – iziContents rc6 - Local/Remote File Inclusion
https://notcve.org/view.php?id=CVE-2005-4600
31 Dec 2005 — Directory traversal vulnerability in tiny_mce_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to read or include arbitrary files via a trailing null byte (%00) in the (1) theme, (2) language, (3) plugins, or (4) lang parameter. • https://www.exploit-db.com/exploits/4441 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •