CVE-2008-1993

EUVD-2008-1991
Acidcat CMS 3.4.1 does not restrict access to the FCKEditor component, which allows remote attackers to upload arbitrary files.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 91%
Affected Products (NVD)
VendorProductVersion
acidcatacidcat_cms
3.4.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://bugreport.ir/index.php?/36
http://securityreason.com/securityalert/3842
http://www.securityfocus.com/archive/1/491129/100/0/threaded
http://www.securityfocus.com/bid/28868
https://exchange.xforce.ibmcloud.com/vulnerabilities/41922
https://www.exploit-db.com/exploits/5478
http://bugreport.ir/index.php?/36
http://securityreason.com/securityalert/3842
http://www.securityfocus.com/archive/1/491129/100/0/threaded
http://www.securityfocus.com/bid/28868
https://exchange.xforce.ibmcloud.com/vulnerabilities/41922
https://www.exploit-db.com/exploits/5478