TinyMCE Compressor Multiple Vulnerabilities

Bugtraq ID:	16083
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 29 2005 12:00AM
Updated:	Dec 29 2005 12:00AM
Credit:	Discovered by Stefan Esser <[email protected]>.
Vulnerable:	TinyMCE Compressor 1.0.5
Not Vulnerable:	TinyMCE Compressor 1.0.6

TinyMCE Compressor Multiple Vulnerabilities

TinyMCE Compressor is prone to multiple remote vulnerabilities.

The script is affected by a file disclosure vulnerability. Information gathered through the exploitation of this issue may aid in other attacks.

The script is also affected by multiple cross-site scripting and HTML injection vulnerabilities. An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

TinyMCE Compressor 1.0.5 and prior versions are vulnerable to these issues.

TinyMCE Compressor Multiple Vulnerabilities

An exploit is not required.

TinyMCE Compressor Multiple Vulnerabilities

Solution:
The vendor has released an upgrade to address these issues.


TinyMCE Compressor 1.0.5

• TinyMCE Compressor 1.0.6
  http://tinymce.moxiecode.com/download.php

TinyMCE Compressor Multiple Vulnerabilities

References:

• Home Page (TinyMCE)
  
• Advisory 26/2005: TinyMCE Compressor Vulnerabilities (Stefan Esser )