vendor:
FCKEditor
by:
Mostafa Azizi, Soroush Dalili
7,5
CVSS
HIGH
File Upload Protection Bypass
434
CWE
Product Name: FCKEditor
Affected Version From: 2.6.8
Affected Version To: 2.6.8
Patch Exists: YES
Related CWE: N/A
CPE: a:fckeditor:fckeditor:2.6.8
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: IIS6
2012
FCKEditor 2.6.8 ASP Version File Upload Protection bypass
There is no validation on the extensions when FCKEditor 2.6.8 ASP version is dealing with the duplicate files. As a result, it is possible to bypass the protection and upload a file with any extension.
Mitigation:
In “config.asp”, wherever you have: ConfigAllowedExtensions.Add “File”,”Extensions Here” Change it to: ConfigAllowedExtensions.Add “File”,”^(Extensions Here)$”
