CVE-2007-3163

MEDIO 5.0CVE-2007-3163 · Published 11/06/2007 · updated 16/06/2026

In breve

CVE-2007-3163 è una vulnerabilità MEDIO (CVSS 5.0) che riguarda fckeditor (frederico caldeira knabben).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.5%, superiore al 74.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
fckeditor frederico_caldeira_knabben	`= 2.4.2`	No fix yet

Description

Incomplete blacklist vulnerability in the filemanager in Frederico Caldeira Knabben FCKeditor 2.4.2 allows remote attackers to upload arbitrary .php files via an alternate data stream syntax, as demonstrated by .php::$DATA filenames, a related issue to CVE-2006-0658.

References

ha.ckers.org/blog/20070606/additional-image-bypass-on-windows
osvdb.org/37554
secunia.com/advisories/25719
secunia.com/advisories/25923
sourceforge.net/project/shownotes.php
bitchiller.de · URL Repurposed
securityfocus.com/bid/24510
exchange.xforce.ibmcloud.com/vulnerabilities/34982

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free