CVE-2008-6951 MauryCMS 0.53.2 and earlier does not require administrative authentication for Editors/fckeditor/editor/filemanager/browser/default/browser.html, which allows remote attackers to upload arbitrary file...
HighCVSS 7.5
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
MauryCMS 0.53.2 and earlier does not require administrative authentication for Editors/fckeditor/editor/filemanager/browser/default/browser.html, which allows remote attackers to upload arbitrary files via a direct request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cms.maury91 maurycms | = 0.53.2 | No fix listed |
References
- 32787 third-party-advisory vendor-advisory
- 32439 vdb-entry
- maurycms-fckeditor-file-upload(46802) vdb-entry
- 7203 exploit