News Script PHP 'fckeditor' Arbitrary File Upload Vulnerability
BID:45619
Info
News Script PHP 'fckeditor' Arbitrary File Upload Vulnerability
| Bugtraq ID: | 45619 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 26 2010 12:00AM |
| Updated: | Jul 05 2011 01:10PM |
| Credit: | Net.Edit0r |
| Vulnerable: |
News Script PHP News Script PHP 0 Mahyanet Cms Mahyanet Cms 0 |
| Not Vulnerable: | |
Discussion
News Script PHP 'fckeditor' Arbitrary File Upload Vulnerability
News Script PHP is prone to an arbitrary-file-upload vulnerability because it fails to properly sanitize user-supplied input.
An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the vulnerable application.
News Script PHP is prone to an arbitrary-file-upload vulnerability because it fails to properly sanitize user-supplied input.
An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the vulnerable application.
Exploit / POC
News Script PHP 'fckeditor' Arbitrary File Upload Vulnerability
Attackers can exploit this issue using a web browser.
Attackers can exploit this issue using a web browser.
Solution / Fix
News Script PHP 'fckeditor' Arbitrary File Upload Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
News Script PHP 'fckeditor' Arbitrary File Upload Vulnerability
References:
References:
- Mahyanet Cms Homepage (Mahyanet Cms)
- News Script PHP Homepage (News Script PHP)