12All File Upload Vulnerability

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: 12All File Upload Vulnerability
From: John McGuire <bugtraq@xxxxxxxxxxxxxxxxxx>
Date: Wed, 02 May 2007 15:07:00 -0700
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
User-agent: Mozilla Thunderbird 1.0.7 (Windows/20050923)

Author: John McGuire
Company: ActiveCampaign
Product: 1-2-All
Version: 4.5x - 4.53.13
Flaw: Arbitrary File Upload
Vendor Notified: Yes
Patch Available: Yes

Patch Location:http://www.activecampaign.com/support/forum/showthread.php?t=3293

URL:http://{12All_Location}/admin/functions/editor/editor/filemanager/browser/default/browser.html

Description: The FCKeditor module used to create HTML emails appears tocheck filenames against a blacklist of bad extensions. Extensions suchas php4 and php5 are not in this list, and can be executed and rundepending on server configuration.

Prev by Date: TPTI-07-06: Trillian Pro Rendezvous XMPP HTML Decoding Heap Corruption
Next by Date: [security bulletin] HPSBPI02185 SSRT071290 rev.2 - HP Jetdirect Running ftp, Remote Denial of Service (DoS)
Previous by thread: TPTI-07-06: Trillian Pro Rendezvous XMPP HTML Decoding Heap Corruption
Next by thread: Re: 12All File Upload Vulnerability
Index(es):
- Date
- Thread