What is the severity of CVE-2008-6178?

CVE-2008-6178 is classified as a high severity vulnerability due to the potential for remote code execution.

How do I fix CVE-2008-6178?

To fix CVE-2008-6178, you should upgrade to a patched version of FCKeditor or apply relevant security patches provided by the vendors.

What type of vulnerability is CVE-2008-6178?

CVE-2008-6178 is an unrestricted file upload vulnerability that allows attackers to upload malicious PHP files.

Which applications are affected by CVE-2008-6178?

CVE-2008-6178 affects FCKeditor versions 2.0rc2, 2.0rc3, 2.2, as well as various versions of Phplist CMS.

Can CVE-2008-6178 lead to data theft?

Yes, CVE-2008-6178 can potentially lead to data theft as it allows remote attackers to execute arbitrary code on the server.

Vulnerability/
CVE-2008-6178

high

7.5

CWE

19/2/2009

7/8/2024

CVE-2008-6178: Code Injection

First published: Thu Feb 19 2009(Updated: )

Unrestricted file upload vulnerability in editor/filemanager/browser/default/connectors/php/connector.php in FCKeditor 2.2, as used in Falt4 CMS, Nuke ET, and other products, allows remote attackers to execute arbitrary code by creating a file with PHP sequences preceded by a ZIP header, uploading this file via a FileUpload action with the application/zip content type, and then accessing this file via a direct request to the file in UserFiles/File/, probably a related issue to CVE-2005-4094. NOTE: some of these details are obtained from third party information.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Ht Editor	=2.0rc2
Ht Editor	=2.0rc3
Ht Editor	=2.2
Ht Editor	=2.3beta
Ht Editor	=2.4.3
Phplist Phplist	=2.10.1
Phplist Phplist	=2.10.2
Phplist Phplist	=2.10.3
Phplist Phplist	=2.10.4
Phplist Phplist	=2.10.5
Phplist Phplist	=2.10.6

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2008-6178?
CVE-2008-6178 is classified as a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2008-6178?
To fix CVE-2008-6178, you should upgrade to a patched version of FCKeditor or apply relevant security patches provided by the vendors.
What type of vulnerability is CVE-2008-6178?
CVE-2008-6178 is an unrestricted file upload vulnerability that allows attackers to upload malicious PHP files.
Which applications are affected by CVE-2008-6178?
CVE-2008-6178 affects FCKeditor versions 2.0rc2, 2.0rc3, 2.2, as well as various versions of Phplist CMS.
Can CVE-2008-6178 lead to data theft?
Yes, CVE-2008-6178 can potentially lead to data theft as it allows remote attackers to execute arbitrary code on the server.

agent/type
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/weakness
agent/author
agent/references
agent/severity
agent/first-publish-date
agent/description
agent/event
agent/source
agent/tags
agent/softwarecombine
collector/nvd-index
agent/software-canonical-lookup-request
collector/nvd-historical
vendor/fckeditor
canonical/ht editor
version/ht editor/2.0rc2
version/ht editor/2.0rc3
version/ht editor/2.2
version/ht editor/2.3beta
version/ht editor/2.4.3
vendor/phplist
canonical/phplist phplist
version/phplist phplist/2.10.1
version/phplist phplist/2.10.2
version/phplist phplist/2.10.3
version/phplist phplist/2.10.4
version/phplist phplist/2.10.5
version/phplist phplist/2.10.6

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2008-6178?
CVE-2008-6178 is classified as a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2008-6178?
To fix CVE-2008-6178, you should upgrade to a patched version of FCKeditor or apply relevant security patches provided by the vendors.
What type of vulnerability is CVE-2008-6178?
CVE-2008-6178 is an unrestricted file upload vulnerability that allows attackers to upload malicious PHP files.
Which applications are affected by CVE-2008-6178?
CVE-2008-6178 affects FCKeditor versions 2.0rc2, 2.0rc3, 2.2, as well as various versions of Phplist CMS.
Can CVE-2008-6178 lead to data theft?
Yes, CVE-2008-6178 can potentially lead to data theft as it allows remote attackers to execute arbitrary code on the server.