Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Incomplete blacklist vulnerability in connector.php in FCKeditor 2.0 and 2.2, as used in products such as RunCMS, allows remote attackers to upload and execute arbitrary script files by giving the files specific extensions that are not listed in the Config[DeniedExtensions][File], such as .php.txt.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FCKeditor connector.php 任意脚本文件执行和上传漏洞
Vulnerability Description
FCKeditor 2.0和2.2在RunCMS等产品中使用时，其中的connector.php存在黑名单不完全漏洞。远程攻击者可以通过为文件设置没有列在Config[DeniedExtensions][File]中的特定扩展名，如.php.txt，来上传并执行任意脚本文件。
CVSS Information
N/A
Vulnerability Type
N/A