Description
Cross-site scripting (XSS) vulnerability in tiny_mce_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to inject arbitrary web script or HTML via the index parameter.
References
- http://tinymce.moxiecode.com/punbb/viewtopic.php?id=2233
- tinymce-compressor-xss(23906) vdb-entry
- 22117 vdb-entry
- http://tinymce.moxiecode.com/punbb/viewtopic.php?id=2244
- 18262 third-party-advisory
- http://www.hardened-php.net/advisory_262005.111.html
- 20051229 Advisory 26/2005: TinyMCE Compressor Vulnerabilities mailing-list
- 16083 vdb-entry
- 1015424 vdb-entry