696 matches found
Cuyahoga FCKEditor Misconfiguration Unrestricted File Upload
The remote host is running Cuyahoga, an open source .NET website framework. The installation of Cuyahoga fails to require authorization to access the FCKEditor component included with it. An unauthenticated, remote attacker may be able to leverage this flaw to view and upload files with FCKEditor...
CVE-2007-0147
Cuyahoga before 1.0.1 installs the FCKEditor component with an incorrect deny statement in a Web.config file, which allows remote attackers to upload files when these privileges were intended only for the Administrator and Editor roles...
Design/Logic Flaw
Cuyahoga before 1.0.1 installs the FCKEditor component with an incorrect deny statement in a Web.config file, which allows remote attackers to upload files when these privileges were intended only for the Administrator and Editor roles...
CVE-2007-0147
Cuyahoga before 1.0.1 installs the FCKEditor component with an incorrect deny statement in a Web.config file, which allows remote attackers to upload files when these privileges were intended only for the Administrator and Editor roles...
CVE-2007-0147
CVE-2007-0147 affects Cuyahoga before 1.0.1, which bundles the FCKEditor component. A misconfigured deny statement in the Web.config allows an unauthenticated, remote attacker to upload files when such privileges were intended only for Administrator and Editor roles. The impact is an unauthorized...
MODx CMS <= 0.9.2.1 (FCKeditor) Remote File Include Vulnerability
No description provided by source. +------------------------------------------------------------------------------------------- + MODx CMS 0.9.2.1 basepath Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Affected...
CVE-2006-4890
UNAK-CMS 1.5 and earlier is affected by CVE-2006-4890 and CVE-2008-3568. The vulnerability is an absolute/remote file inclusion in fckeditor/editor/filemanager/browser/default/connectors/php/connector.php (and related fckeditor/editor/dialog/fck_link.php for CVE-2006-4890), where an attacker can ...
UNAK-CMS 1.5 - dirroot Remote File Inclusion
UNAK-CMS 1.5 - dirroot Remote File Inclusion ============================================================================================== UNAK-CMS = v1.5 dirroot Remote File Inclusion Exploit =============================================================================================== Critica...
UNAK-CMS <= 1.5 (dirroot) Remote File Include Vulnerabilities
No description provided by source. ============================================================================================== UNAK-CMS = v1.5 dirroot Remote File Inclusion Exploit =============================================================================================== Critical Level :...
UNAK-CMS 1.5 - 'dirroot' Remote File Inclusion
============================================================================================== UNAK-CMS ================================================================================================ Exploit : -------------------------------- http://sitename.com/Script...
Awareness of vulnerabilities haha-vulnerability warning-the black bar safety net
Text/SuperHeiAtph4nt0m.org 2006-2-12 2006-02-0 9, milw0rm released the FCKEditor one upload vulnerability1. Fig. FCKEditor is one of a plurality of language Language version of theasp,cgi,aspx,php,cfm,...of the online editing class2, many web systems use this A class. In fact, this is something o...
ToendaCMS 1.0.0 - FCKeditor Arbitrary File Upload
ToendaCMS 1.0.0 - FCKeditor Arbitrary File Upload !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; retur...
toendaCMS <= 1.0.0 (FCKeditor) Remote File Upload Exploit
Exploit for unknown platform in category web applications ========================================================= toendaCMS 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15...
toendaCMS <= 1.0.0 (FCKeditor) Remote File Upload Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "ToendaCMS = 1.0.0 Shizouka stable 'FuCKeditor' remote commands execution\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork: "toendaCMS is Free Software released under th...
ToendaCMS 1.0.0 - 'FCKeditor' Arbitrary File Upload
!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex =...
ACMS vulnerability-vulnerability warning-the black bar safety net
A few days ago a friend asked me to help him dosecurity testing, his Station is ACMS information distribution system. I to the official down a set of ACMS to study. ACMS front Desk is by the back-end to generate the static page, there is no injection vulnerability. The background comes with the...
CVE-2006-3362
Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in 1 Geeklog 1.4.0 through 1.4.0sr3, 2 toendaCMS 1.0.0 Shizouka Stable and earlier, 3 WeBid 0.5.4, and possibly other products, when installed on Apache with modmime, allows remote...
CVE-2006-3362
Unrestricted file upload in connectors/php/connector.php of FCKeditor mcpuk file manager enables remote PHP code execution. Affected products include Geeklog 1.4.0 through 1.4.0sr3, toendaCMS 1.0.0 Shizouka Stable and earlier, and WeBid 0.5.4, on Apache with mod_mime. The vulnerability stems from...
CVE-2006-3362
Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in 1 Geeklog 1.4.0 through 1.4.0sr3, 2 toendaCMS 1.0.0 Shizouka Stable and earlier, 3 WeBid 0.5.4, and possibly other products, when installed on Apache with modmime, allows remote...