high7.5Public exploit code
CVE-2008-1993
Acidcat CMS 3.4.1 does not restrict access to the FCKEditor component, which allows remote attackers to upload arbitrary files.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Acidcat CMS 3.4.1 - Multiple Vulnerabilities2008-04-20 · webapps · php · Verified
Impact
Acidcat CMS 3.4.1 does not restrict access to the FCKEditor component, which allows remote attackers to upload arbitrary files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Acidcat | Acidcat Cms | Version 3.4.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://bugreport.ir/index.php?/36
- http://securityreason.com/securityalert/3842
- http://www.securityfocus.com/archive/1/491129/100/0/threaded
- http://www.securityfocus.com/bid/28868
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41922
- https://www.exploit-db.com/exploits/5478
- http://bugreport.ir/index.php?/36
- http://securityreason.com/securityalert/3842
- http://www.securityfocus.com/archive/1/491129/100/0/threaded
- http://www.securityfocus.com/bid/28868
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41922
- https://www.exploit-db.com/exploits/5478