Published: 01/10/2007 Updated: 14/10/2020

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 760

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Incomplete blacklist vulnerability in editor/filemanager/upload/php/upload.php in FCKeditor, as used in SiteX CMS 0.7.3.beta, La-Nai CMS, Syntax CMS, Cardinal Cms, and probably other products, allows remote malicious users to upload and execute arbitrary PHP code via a file whose name contains ".php." and has an unknown extension, which is recognized as a .php file by the Apache HTTP server, a different vulnerability than CVE-2006-0658 and CVE-2006-2529.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cardinal cms project cardinal cms 1.2
redlinesoft lanai cms
sitex cms project sitex cms 0.7.3
syntax cms project syntax cms

Debian Bug report logs - #444928 CVE-2007-5156 remote php file inclusion vulnerability in fckeditor Package: knowledgeroot; Maintainer for knowledgeroot is (unknown); Reported by: Nico Golde <nion@debianorg> Date: Mon, 1 Oct 2007 22:39:01 UTC Severity: grave Tags: patch, security Fixed in versions knowledgeroot/0984- ...

<?php /* -------------------------------------------------------------- La-Nai CMS <= 1216 (fckeditor) Arbitrary File Upload Exploit -------------------------------------------------------------- author: EgiX mail: n0b0d13s[at]gmail[dot]com link: sourceforgenet/projects/la-nai/ [-] vulnerable code in /inclu ...

<?php /* -------------------------------------------------------------- Syntax CMS <= 13 (fckeditor) Arbitrary File Upload Exploit -------------------------------------------------------------- Gr33ts t0 : EgiX, ThE GeNeRal L0s3r , Houssamix ,Str0ke <==> special THanks to EgiX For the Exploit Code author: Stack mail: ...

NVD-CWE-Other http://www.waraxe.us/advisory-57.html http://dev.fckeditor.net/changeset/973 http://dev.fckeditor.net/ticket/1325 http://sourceforge.net/forum/forum.php?forum_id=743930 http://sourceforge.net/project/shownotes.php?release_id=546000 http://secunia.com/advisories/27123 http://secunia.com/advisories/27174 http://securityreason.com/securityalert/3182 http://www.securityfocus.com/bid/29422 http://www.securityfocus.com/bid/30677 http://downloads.securityfocus.com/vulnerabilities/exploits/30677.php http://www.vupen.com/english/advisories/2007/3465 http://www.vupen.com/english/advisories/2007/3464 https://exchange.xforce.ibmcloud.com/vulnerabilities/44455 https://exchange.xforce.ibmcloud.com/vulnerabilities/42733 https://exchange.xforce.ibmcloud.com/vulnerabilities/42425 https://www.exploit-db.com/exploits/5688 https://www.exploit-db.com/exploits/5618 http://www.securityfocus.com/archive/1/480830/100/0/threaded https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=444928 https://nvd.nist.gov https://www.exploit-db.com/exploits/5618/

CVE-2007-5156

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect