description: Tiny browser in TinyMCE 3.0 editor in Joomla! before 1.5.13 allows file upload and arbitrary PHP code execution.
problem types: Arbitrary PHP Code Execution
affected:
{
product: Tiny browser included with TinyMCE 3.0
vendor: Joomla!
versions:
status: affected, version: 1.5.12
status: affected, version: fixed in 1.5.13
}