Description
MauryCMS 0.53.2 and earlier does not require administrative authentication for Editors/fckeditor/editor/filemanager/browser/default/browser.html, which allows remote attackers to upload arbitrary files via a direct request.
References
- maurycms-fckeditor-file-upload(46802) vdb-entry
- 7203 exploit
- 32787 third-party-advisory
- 32439 vdb-entry