KindEditor - Multiple Arbitrary File Upload Vulnerabilities

KindEditor - Multiple Arbitrary File Upload Vulnerabilities source: https://www.securityfocus.com/bid/58431/info KindEditor is prone to multiple remote file-upload vulnerabilities because it fails to sufficiently sanitize user-supplied input. Attackers can exploit these issues to upload arbitrary...

KindEditor (v.3.x->4.1.5) <= Multiple File/Shell Upload Vulnerability

This bug in KindEditor you can upload remote files .txt .html ...etc with multiple JSON upload langs type PHP / ASP / JSP / ASP.NET this bug found in old versions by some author , but is still work is latest version . - Latest V. is 4.1.5 , Released on Jan 19, 2013...

KindEditor 4.1.5 Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

KindEditor - Multiple Arbitrary File Upload Vulnerabilities

source: https://www.securityfocus.com/bid/58431/info KindEditor is prone to multiple remote file-upload vulnerabilities because it fails to sufficiently sanitize user-supplied input. Attackers can exploit these issues to upload arbitrary code and run it in the context of the web server process...

KindEditor - 'name' Cross-Site Scripting

source: https://www.securityfocus.com/bid/55172/info KindEditor is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

KindEditor - name Cross-Site Scripting

KindEditor - name Cross-Site Scripting source: https://www.securityfocus.com/bid/55172/info KindEditor is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of...

KindEditor 4.1.2 Cross Site Scripting

KindEditor 4.1.2 name parameter Reflected XSS Vulnerability Vendor: Shanghai Hao Yue Software Co., Ltd. Product web page: http://www.kindeditor.net Affected version: 4.1.2 and 4.0.6 Summary: KindEditor online HTML editor is a set of open source, mainly for users on the site to get WYSIWYG editing...

KindEditor 4.1.2 (name parameter) Reflected XSS Vulnerability

Summary KindEditor online HTML editor is a set of open source, mainly for users on the site to get WYSIWYG editing effects, developers can replace the traditional multi-line text input box textarea KindEditor rich visualization text input box. Description KindEditor is prone to a reflected...

Intelligent core multi-language enterprise website management system 4. 1. 0 SQL injection and upload vulnerabilities-vulnerability warning-the black bar safety net

Vulnerability type: SQL injection Test version: the intelligent core multi-language enterprise website management system 4. 1. 0 Editor Version: KindEditor 4.0.3 Vulnerability description: ① Injection vulnerability Vulnerability file:\Cn\About. asp & \Include\Bottom. asp The exploit: the Add Tabl...

KindEditor 3.5.5 遍历目录漏洞

No description provided by source. 1.http://localhost/67cms/kindeditor/php/filemanagerjson.php?path=/ //path=/，爆出绝对路径D:\AppServ\www\67cms\kindeditor\php\filemanagerjson.php 2.http://localhost/67cms/kindeditor/php/filemanagerjson.php?path=AppServ/www/67cms/ //根据爆出的绝对路径，修改path的值为AppServ/www/67cms/...

Kindeditor traverse the directory 0DAY-vulnerability warning-the black bar safety net

Author: sub - ↘meter Version: 3.4.2 Description: KindEditor is an open source HTML visual editor, mainly used to allow users on the site to get WYSIWYG editing effects, compatible with IE, Firefox, Chrome, Safari, Opera and other mainstream browser. KindEditor using JavaScript, you can seamlessly...