CVE-2007-0147 | BDVDB-2026-21475 Detail

Description#

Cuyahoga before 1.0.1 installs the FCKEditor component with an incorrect deny statement in a Web.config file, which allows remote attackers to upload files when these privileges were intended only for the Administrator and Editor roles.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://osvdb.org/32643
http://cuyahoga.svn.sourceforge.net/viewvc/cuyahoga?view=rev&revision=551
http://secunia.com/advisories/23662
http://www.securityfocus.com/bid/21927
http://www.cuyahoga-project.org/10/section.aspx/61

Exploit#

No public exploit known

History#

Version 12007-01-09Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.