Approved changes feed: RSS · Atom

cpe:2.3:a:moxiecode:tinymce_compressor_php:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMoxiecode (3d7d5e71-aa37-51ae-9b05-90f4f1162851)
ProductTinymce Compressor Php (1e461fdf-6945-5454-99cb-53d9eb45a0f1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/tinymce/tinymce_compressor purl2cpe 2026-06-01 10:17:01.679610

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-4600 vulnerable 2026-06-08 04:48:44.309145 Details available
Directory traversal vulnerability in tiny_mce_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to read or include arbitrary files via a trailing null byte (%00) in the (1) theme, (2) language, (3) plugins, or (4) lang parameter.
Published: 2006-01-01T23:00:00.000Z
Updated: 2024-08-07T23:53:27.815Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4599 vulnerable 2026-06-08 04:48:44.308588 Details available
Cross-site scripting (XSS) vulnerability in tiny_mce_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to inject arbitrary web script or HTML via the index parameter.
Published: 2006-01-01T23:00:00.000Z
Updated: 2024-08-07T23:53:27.938Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.