← All advisories

Critical severity9.8NVD Advisory· Published Feb 12, 2020· Updated Jun 16, 2026

CVE-2011-4906

CVE-2011-4906

Description

Tiny browser in TinyMCE 3.0 editor in Joomla! before 1.5.13 allows file upload and arbitrary PHP code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Tiny/Tinybrowser
cpe:2.3:a:tiny:tinybrowser:*:*:*:*:*:joomla\!:*:*
Range: <1.5.13
Joomla/TinyMCEllm-create
Range: <1.5.13
Joomla/Joomla!llm-fuzzy
Range: <1.5.13
Joomla!/Tiny browser included with TinyMCE 3.0v5
Range: 1.5.12

Patches

Vulnerability mechanics

References

3

www.exploit-db.com/exploits/10183nvdExploitThird Party AdvisoryVDB Entry
developer.joomla.org/security/news/301-20090722-core-file-upload.htmlnvdVendor Advisory
www.openwall.com/lists/oss-security/2011/12/25/7nvdMailing ListThird Party Advisory

News mentions

0

No linked articles in our index yet.