| Package | Affected versions | Patched versions |
|---|---|---|
| cuyahoga | ≤ 1.0.0 |
Cuyahoga before 1.0.1 installs the FCKEditor component with an incorrect deny statement in a Web.config file, which allows remote attackers to upload files when these privileges were intended only for the Administrator and Editor roles.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free