PT-2012-1035

Name of the Vulnerable Software and Affected Versions FCKeditor versions 2.6.7 and earlier Description A cross-site scripting XSS issue exists in the print textinputs var function, allowing remote attackers to inject arbitrary web script or HTML via textinputs array parameters. Multiple...

CVE-2012-4000: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the printtextinputsvar function in editor/dialog/fckspellerpages/spellerpages/server-scripts/spellchecker.php in FCKeditor 2.6.7 and earlier allows remote attackers to inject arbitrary web script or HTML via textinputs array parameters...

FCKEditor Core - Editor spellchecker.php Cross-Site Scripting

FCKEditor Core - Editor spellchecker.php Cross-Site Scripting source: https://www.securityfocus.com/bid/54188/info FCKEditor is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in t...

FCKEditor Core - 'Editor 'spellchecker.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/54188/info FCKEditor is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

fckeditor 2.2 upload.php PHP环境下任意文件上传漏洞

No description provided by source...

fckeditor 2.4.3 upload.php PHP环境下任意文件上传漏洞

No description provided by source...

Havalite CMS v1.0.4 Multiple Vulnerabilities

Exploit for php platform in category web applications Title: ====== Havalite CMS v1.0.4 - Multiple Web Vulnerabilities Date: ===== 2012-04-23 Introduction: ============= Havalite, a lightweight, open source CMS, based on php and SQLite. It\\\'s licensed under the GNU General Public License. - A...

FCKeditor create a folder, Upload a file when“.” Change“_”to break-vulnerability warning-the black bar safety net

Some of the tips, and sometimes quite useful, to collect, data collection in the Internet...... FCKeditor file uploads“.” Change“”underscores the bypass method: This is published online: A lot of times the uploaded file for example: shell.php.rar or shell.php;. jpg becomes shellphp;. jpg this is...

Wordpress Plugin Wp-insert [FCKeditor] Upload Shell

Exploit for php platform in category web applications Exploit Title: Wp-insert Wordpress Plugin FCKeditor Upload Date: 06-04-2012 Author: Hacker-Fire Category:: webapps Software Link: http://wordpress.org/extend/plugins/wp-insert/ Google dork: /wp-insert/fckeditor/ Tested on: Windows 7 & BT5r2 De...

Template CMS (FCKEditor) File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 »...

Will Bo CMS Powered by JumbotCms vulnerability-vulnerability warning-the black bar safety net

Due to the working relationship between the detection of a station when found his URL more special with a cmsfile directory; swept under the directory find a fck because the version is relatively low, you can traverse the directory Baidu it is not human hair, it made it relatively lower...

Bdesign CMS (FCKEditor) File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 »...

WebPortal CMS Beta Arbitrary File Upload

In The Name Of GOD ============================================================================== WebPortal CMS BETA fckeditor Arbitrary File Upload Vulnerability ============================================================================== » Title : WebPortal CMS BETA fckeditor Arbitrary File...

WordPress deans with pwwangs code plugin (FCKeditor) File Upload

Exploit for php platform in category web applications Exploit Title: WordPress deans with pwwangs code plugin for wordpress FCKeditor Remote File Upload Author: T0x!c Date : 28/03/2012 Facebook Page: www.facebook.com/DzTem E-mail: email protected Category:: webapps Google Dork:...

Drupal FCKEditor/CKEditor PHP Execution

?php Exploit Title: Drupal FCKEditor/CKEditor module remote PHP execution Date: March 19, 2012 Author: Patroscon Software Link: http://drupal.org/project/ckeditor, http://drupal.org/project/fckeditor Version: FCKEditor 6.x-2.2, CKEditor 6.x-1.8, CKEditor 7.x-1.6. Tested on: Linux, Windows Vendor...

KingCMS ASP 5.0/5.1 vulnerability-vulnerability warning-the black bar safety net

KingCMS ASP is based on ASP+ACCESS framework of a very good CMS system, the reception is all static processing, the new generation of KingCMS provides a better interface, more development leeway, more powerful expansion capability, and now also by many webmasters welcome. But in the absence of th...

SA-CONTRIB-2012-040 - CKEditor and FCKeditor - multiple XSS, arbitrary code execution

CKEditor and its predecessor FCKeditor allow Drupal to replace textarea fields with the FCKEditor - a visual HTML WYSIWYG editor. The modules have an AJAX callback that filters text to prevent Cross site scripting attacks on content edits. This AJAX callback function contains a number of bugs whi...

fckeditor 2.6 X 0day vulnerabilities-vulnerability warning-the black bar safety net

I speak about it. This can be said that the fckeditor 2.63 oday. Currently know more people. Also comparison old. http://xxxx.com/fckeditor/editor/filemanager/connectors/test.html http://hbkingco.com//fckeditor/editor/filemanager/connectors/uploadtest.html this two page, is a dead key. Upload xx...

AlegroCart FCKEditor Command Execution

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

WordPress EditorMonkey (FCKeditor)remote file upload vulnerability-vulnerability warning-the black bar safety net

EditorMonkey is WordPress in a plugin,EditorMonkey in the FCKeditor editor is the presence of a remote file upload vulnerability can lead an attacker directly exploit the vulnerability to obtain the webshell on. +info: WordPress EditorMonkey FCKeditor Remote File Upload Author : kaMtiEz...