CVE-2007-2630

Incomplete blacklist vulnerability in filemanager/browser/default/connectors/php/config.php in the FCKeditor module, as used in ActiveCampaign 1-2-All (aka…

published May 11, 2007

CVSS
—
EPSS
1%
Percentile
70.4
In the wild
Unconfirmed
What it is

Incomplete blacklist vulnerability in filemanager/browser/default/connectors/php/config.php in the FCKeditor module, as used in ActiveCampaign 1-2-All (aka 12All) 4.50 through 4.53.13, and possibly other products, allows remote authenticated administrators to upload and possibly execute .php4 and .php5 files via unspecified vectors. NOTE: this issue is reachable through filemanager/browser/default/browser.html.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01311 · 70.4th percentile
Published
2007-05-11T17:00Z
EPSS history
Timeline
  • 11 MAY 17:00Z
    Incomplete blacklist vulnerability in filemanager/browser/default/connectors/php/config.php in the FCKeditor module, as used in ActiveCampaign 1-2-All (aka…
    cvelistv5