CVE-2014-4037

Technical details for CVE-2014-4037 are not publicly available in the provided connected documents. The materials only reference the vulnerability in general terms without product/version specifics or remediation. Monitor for updates from official advisories.

CVE-2014-4037

Removed by vendor...

CVE-2014-4037: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in editor/dialog/fckspellerpages/spellerpages/server-scripts/spellchecker.php in FCKeditor before 2.6.11 and earlier allows remote attackers to inject arbitrary web script or HTML via an array key in the textinputs parameter, a different issue than...

PT-2014-5689

Name of the Vulnerable Software and Affected Versions FCKeditor versions prior to 2.6.11 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via an array key in the textinputs parameter in the spellchecker.php file. Recommendations...

FCKeditor 2.6.10 Cross Site Scripting

Class Cross-Site Scripting Remote Yes Published 2nd June 2014 Credit Robin Bailey of Dionach [email protected] Vulnerable FCKeditor alertdocument.cookie;//=zz The vendor was notified of this issue, and FCKeditor 2.6.11 was released to address this vulnerability. See the following vendor...

Odd guest stars of a certain sub-patch not getshell-a vulnerability warning-the black bar safety net

Problem site: wan.7k7k.com Nginx file parsing vulnerability 0x00:everything is beautiful to blame ! In the site to see a beauty player, to view the next image address, 发现url为http://wan.7k7k.com/uploadfiles/userfiles/image/%E7%A5%9E%E6%9B%B2/%E7%8E%A9%E5%AE%B62.jpg Try the url+/x. php can...

InVision: Multiple Upload Vulnerability !File Upload + File Inclusion (Access Not Forbidden)

Uploaded files represent a significant risk to applications. The first step in many attacks is to get some code to the system to be attacked. Then the attack only needs to find a way to get the code executed. Using a file upload helps the attacker accomplish the first step...

To solve the FCKEDITOR to remove all the upload page how to upload invasion-vulnerability warning-the black bar safety net

Long time no script invasion,today for participating in a match,then the certificate actually needs the money to buy,it is very uncomfortable,Baidu took under its official website,for a security,the result is not successful,because the iis file parsing vulnerability patch on,but learned some of t...

BalkanSys Default Credentials / Redirection / File Upload

Title : BalkanSys Multiple Vulnerabilities Author : DevilScreaM Date : 10/26/2013 Category : Web Applications Type : PHP Vendor : http://balkansys.com/ Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Security Indonesian Hacker | Indonesian Exploiter | Indonesian Cyber...

[PT-2013-41] Arbitrary Code Execution in Ajax File and Image Manager

----------------------------------------------------------- PT-2013-41 Positive Technologies Security Advisory Arbitrary Code Execution in Ajax File and Image Manager ----------------------------------------------------------- --- Vulnerable software Ajax File and Image Manager Version: 1.1 and...

Ajax File And Image Manager 1.1 Code Execution

----------------------------------------------------------- PT-2013-41 Positive Technologies Security Advisory Arbitrary Code Execution in Ajax File and Image Manager ----------------------------------------------------------- --- Vulnerable software Ajax File and Image Manager Version: 1.1 and...

IPIX Solutions Shell Upload

Exploit Title : IPIX Solutions FCKEditor File Upload Vulnerability Author : DevilScreaM Date : 14/09/2013 Category : Web Applications Vendor : http://ipixsolutions.com Dork intext:Powered By Ipix Solutions intext:Powered By:IPIX SOLUTIONS intext:Website Design @ IPIX Solutions. Vulnerability :...

用友某内网办公平台FCKeditor版本过低导致任意文件上传任意代码执行

简要描述： 详细说明： 分站的一个FCK无意间看见结果能上传任何文件并且导致任意代码执行 都在域里面了可以继续搞。 漏洞证明： shell地址：http://zhishi.yonyou.com/uploadfiles/File/20137423240897937.asp 密码c...

FCKeditor 2.4.3 /fckeditor/editor/filemanager/browser/default/connectors/asp/class_upload.asp 文件上传漏洞

...

FCKeditor 2.4.3 /fckeditor/editor/filemanager/browser/default/connectors/php/commands.php 文件上传漏洞

FCKeditor是国外一款非常流行的所见即所得文字编辑器,其=2.4.3版本/fckeditor/editor/filemanager/browser/default/connectors/php/commands.php 文件中，该文件将对文件后缀进行了简单的过滤，但是在config.php中还是以黑名单进行过滤，当用户在上传文件后面加上一个空格时，就可以绕过这个过滤，导致文件上传漏洞。 FCKeditor 2.4.3...

FCKeditor 2.6.4 /fckeditor/editor/filemanager/browser/default/connectors/php/io.php 文件上传漏洞

...

FCKeditor 2.4.3 /fckeditor/editor/filemanager/upload/asp/class_upload.asp 文件上传漏洞

...

zencart editors/fckeditor bug fixes after the secondary use-vulnerability warning-the black bar safety net

Vulnerability file: editors/fckeditor/editor/filemanager/upload/php/upload.php Online given fix solution is to Repair method, remove the FCK editor with other editors Or find editors/fckeditor/editor/filemanager/upload/php/upload.php file In require‘config.php’; require‘util.php’; Below add the...

kingcms 5.0 vulnerability-a vulnerability warning-the black bar safety net

To 1. kingcms 5.0 fckeditor the default path in the admin/system/editor/FCKeditor/editor/fckeditor.Html The local horse named for the hx. asp;jpg watch jpg the front there is no point.. OK..actually later do stations combined fckeditor this editor..plus the best verification..only management can...

FCK 0day FCKeditor create a folder,Upload a file when"." Change"_"to break-vulnerability warning-the black bar safety net

A lot of times the uploaded file for example: shell.php.rar or shell.php;. jpg becomes shellphp;. jpg this is the new version of the FCK change, try to upload 1. asp;jpg Submitted shell.php+space to get around, but the spaces only support win system is nix is not supported, shell.php and...