Searching connectors software vulnerabilities

connectors/php/connector.php in FCKeditor mcpuk

connectors/php/connectorphp | FCKeditor | manager | mcpuk | used | file |

connectors/php/connector.php in FCKeditor mcpuk file manager, as used in (1) Geeklog 1.4.0 through 1.4.0sr3, (2) toendaCMS 1.0.0 Shizouka Stable and earlier, and possibly other products, when installed on Apache with mod_mime, allows remote attackers to upload and execute arbitrary PHP code via a filename with a .php extension and a trailing extension that is allowed, such as .zip.


Multiple PHP remote file inclusion vulnerabilit

vulnerabilities | arbitrary | inclusion | parameter | attackers | UNAK-CMS | Multiple | execute | dirroot | earlier | remote | allow | file | code | PHP | via | URL |

Multiple PHP remote file inclusion vulnerabilities in UNAK-CMS 1.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the dirroot parameter to (1) fckeditor/editor/filemanager/browser/default/connectors/php/connector.php or (2) fckeditor/editor/dialog/fck_link.php.


PHP remote file inclusion vulnerability in mana

manager/media/browser/mcpuk/connectors/php/Commands/Thumbnailphp | vulnerability | inclusion | remote | Modx | file | CMS | PHP |

PHP remote file inclusion vulnerability in manager/media/browser/mcpuk/connectors/php/Commands/Thumbnail.php in Modx CMS 0.9.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the base_path parameter. NOTE: it is possible that this is a vulnerability in FCKeditor.


Incomplete blacklist vulnerability in filemanag

filemanager/browser/default/connectors/php/configphp | ActiveCampaign | vulnerability | Incomplete | FCKeditor | blacklist | 1-2-All | module | used |

Incomplete blacklist vulnerability in filemanager/browser/default/connectors/php/config.php in the FCKeditor module, as used in ActiveCampaign 1-2-All (aka 12All) 4.50 through 4.53.13, and possibly other products, allows remote authenticated administrators to upload and possibly execute .php4 and .php5 files via unspecified vectors. NOTE: this issue is reachable through filemanager/browser/default/browser.html.


Software vulnerabilities results 1 to 5 of 5     
Page: 1