Tiny

Records22All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

Tiny records in CISA KEV

No Tiny vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Tinybrowser · all components

TI-2011-04222 CVE-2011-4908 · GHSA-2cvc-p4v7-3gpx

HIGH 75

TinyBrowser plugin for Joomla! before 1.5.13 allows arbitrary file upload via upload.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.55769 Published 2020-02-12 No fix listed CWE-434

TI-2011-04220 CVE-2011-4906 · GHSA-7v56-j653-c26v

MEDIUM 54

Tiny browser in TinyMCE 3.0 editor in Joomla! before 1.5.13 allows file upload and arbitrary PHP code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09582 Published 2020-02-12 No fix listed CWE-434