CKFinder 1.4.3 文件上传漏洞

CKFinder是国外一款非常流行的所见即所得文字编辑器,其1.4.3 asp.net版本存在任意文件上传漏洞，攻击者可以利用该漏洞上传任意文件。 CKFinder 1.4.3...

FCKEditor 2.6.8 file upload and CKFinder/FCKEditor DoS vulnerability-vulnerability warning-the black bar safety net

Thanks to the endless in freebuf community”share the mission”to give a clue, only with this article Original post: http://club.freebuf.com/?/question/129reply12 FCKEditor 2.6.8 file upload vulnerability Exploit-db on the original as follows: - Title: FCKEditor 2.6.8 ASP Version File Upload...

CKFinder 2.3 / FCKEditor 2.6.8 SWF Cross Site Scripting

Hello The latest versions of CKFinder 2.3 and FCKEditor2.6.8 are accepting SWF as a valid extension. As a result, it is possible to make a website vulnerable to an XSS attack by uploading a malicious SWF file. Source: http://soroush.secproject.com/blog/2012/11/xss-by-uploadingincluding-a-swf-file...

DynPage 1.0 - ckfinder Multiple Arbitrary File Upload Vulnerabilities

DynPage 1.0 - ckfinder Multiple Arbitrary File Upload Vulnerabilities source: https://www.securityfocus.com/bid/53696/info DynPage is prone to multiple arbitrary-file-upload vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to upload...

PHPnuke MT 8.3.5 ckfinder Shell Upload

Exploit Title: PHPnuke MT 8.3.5 ckfinder Plugin Arbitrary File upload Vulnerability Date: 2011 06 27 GMT +7 Author: Net.Edit0r Software Link: http://www.phpnuke.ir/ Version : 8.3.5 Tested on: ubuntu 11.04 Centos CVE : - ---------------------------------------------------------------------------...

Qi Bo CMS whole Station system V7. 0 0day latest vulnerability-vulnerability warning-the black bar safety net

The first environment is IIS6. 0. Vulnerability test: http://www.xxx.com/ewebeditor/ckfinder/ckfinder.html?Type=Images&CKEditor=content1&CKEditorFuncNum=1&langCode=zh-cn Registered user, to the Management Center, published articles, CKFINDER upload your know how! After uploading the path is:...