CVE-2011-4908

This is a detailed vulnerability writeup for TinyBrowser 1.41.6, describing multiple issues including insecure default configurations, arbitrary folder creation, file hosting, XSS, and CSRF. No exploit code is provided, only explanations and attack vectors.

This exploit targets a file upload vulnerability in Joomla 1.5.12's TinyMCE/tinybrowser plugin, allowing arbitrary PHP code execution by uploading a malicious file and renaming it to bypass restrictions.

This Metasploit module exploits a file upload vulnerability in Joomla 1.5.12's TinyBrowser plugin, allowing arbitrary PHP code execution by uploading a malicious file and renaming it to bypass restrictions.