Researcher: AnGeL25dZ http://www.milw0rm.com/exploits/7506 As noted by Nico Golde here: http://www.openwall.com/lists/oss-security/2009/02/08/1 There's no PHP code. http://tinymce.moxiecode.com/ says "Javascript WYSIWYG Editor." str0ke? - Steve