Safety ColdFusion - FCKEditor

Posted At : July 4, 2009 8:31 AM | Posted By : Pedro Claudio
Comments | Trackbacks | Related Categories: ColdFusion

There is a critical point in FCKeditor, who was announced some time, when detected in connectors ASP and PHP.

PHP - GeekLog v1.4.0 FckEditor File Upload Security Vulnerability

ASP - Exploiting IIS via HTMLEncode (MS08-006)

Now this vulnerability was detected in the version 8.0.1 of ColdFusion, the version 8.0 apparently does not suffer of this failure, but it is worth check.

Many local are supplying information to prevent frights.

Problem safety serious in CF 8.01

CF8 and FCKEditor Security Threat

ColdFusion 8 FCKeditor Vulnerability

I recommend disable filemanager.

TrackBacks
There are no trackbacks for this entry.

Trackback URL for this entry:
http://blog.pcsilva.com/en/trackback.cfm?451D8093-C298-ED05-B026FE3D8516AC6C

[Add Trackback]
Comments (Comment Moderation is enabled. Your comment will not appear until approved.)

There are no comments for this entry.

[Add Comment] [Subscribe to Comments]