{"vulnerability": "cve-2011-4908", "sightings": [{"uuid": "f857f273-a21b-44b2-9d9e-dd79ae58b9c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-4908", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:40.000000Z"}, {"uuid": "36e22560-e6aa-443f-a466-78222e3a5394", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-4908", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:59.000000Z"}, {"uuid": "7ec789ed-e87a-46e3-8fa3-043b2d594914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-4908", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/joomla_tinybrowser.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "aab5dead-2c2d-46bc-81cf-a56e9ba75c02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2011-4908", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/9296", "content": "", "creation_timestamp": "2009-07-28T00:00:00.000000Z"}, {"uuid": "3327bf18-a7de-4ab1-9c77-460da3a7ae32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2011-4908", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/9926", "content": "", "creation_timestamp": "2009-07-22T00:00:00.000000Z"}, {"uuid": "d1ac01d5-2c36-44ba-85bc-b8dac72d35e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-4908", "type": "seen", "source": "https://t.me/cibsecurity/9805", "content": "ATENTION\u203c New - CVE-2011-4908\n\nTinyBrowser plugin for Joomla! before 1.5.13 allows arbitrary file upload via upload.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-02-13T00:37:28.000000Z"}, {"uuid": "2cca5bbb-d186-4025-b657-9b047fd1edd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-4908", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/joomla_tinybrowser.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"spinbad \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability in the TinyMCE/tinybrowser plugin.\\n          This plugin is not secured in version 1.5.12 of joomla and allows the upload\\n          of files on the remote server.\\n          By renaming the uploaded file this vulnerability can be used to upload/execute\\n          code on the affected system.\", \"disclosure_date\": \"2009-07-22\", \"fullname\": \"exploit/unix/webapp/joomla_tinybrowser\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"Joomla 1.5.12 TinyBrowser File Upload Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/joomla_tinybrowser.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/webapp/joomla_tinybrowser\", \"references\": [\"CVE-2011-4908\", \"OSVDB-64578\", \"EDB-9296\", \"URL-http://developer.joomla.org/security/news/301-20090722-core-file-upload.html\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:43.692884Z"}]}