Description
Acidcat CMS 3.4.1并不限制对FCKEditor组建的访问, 这会允许远程攻击者上传任意文件。
Acidcat CMS 任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.exploit-db.com/exploits/15597
https://nvd.nist.gov/vuln/detail/CVE-2008-1993
http://www.360doc.com/content/10/1129/11/73357889_73357889.shtml
https://cxsecurity.com/cveproduct/3660/12970/acidcat_cms/
https://www.threatquarters.com/cves/CVE-2008-1993
https://pentest-tools.com/vulnerabilities-exploits/acidcat-cms-multiple-vulnerabilities_18931