CVE-2007-5156

Incomplete blacklist vulnerability in editor/filemanager/upload/php/upload.php in FCKeditor, as used in SiteX CMS 0.7.3.beta, La-Nai CMS, Syntax CMS, Cardinal Cms, and probably other products, allows remote attackers to upload and execute arbitrary PHP code via a file whose name contains ".php." and has an unknown extension, which is recognized as a .php file by the Apache HTTP server, a different vulnerability than CVE-2006-0658 and CVE-2006-2529.

• http://dev.fckeditor.net/changeset/973Vendor Advisory
• http://dev.fckeditor.net/ticket/1325Vendor Advisory
• http://downloads.securityfocus.com/vulnerabilities/exploits/30677.phpBroken Link
• http://secunia.com/advisories/27123Third Party Advisory
• http://secunia.com/advisories/27174Third Party Advisory
• http://securityreason.com/securityalert/3182Exploit, Third Party Advisory
• http://sourceforge.net/forum/forum.php?forum_id=743930Broken Link
• http://sourceforge.net/project/shownotes.php?release_id=546000Broken Link
• http://www.securityfocus.com/archive/1/480830/100/0/threadedExploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/29422Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/30677Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2007/3464Third Party Advisory
• http://www.vupen.com/english/advisories/2007/3465Third Party Advisory
• http://www.waraxe.us/advisory-57.htmlExploit, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42425Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42733Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44455Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/5618Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/5688Exploit, Third Party Advisory, VDB Entry
• http://dev.fckeditor.net/changeset/973Vendor Advisory
• http://dev.fckeditor.net/ticket/1325Vendor Advisory
• http://downloads.securityfocus.com/vulnerabilities/exploits/30677.phpBroken Link
• http://secunia.com/advisories/27123Third Party Advisory
• http://secunia.com/advisories/27174Third Party Advisory
• http://securityreason.com/securityalert/3182Exploit, Third Party Advisory
• http://sourceforge.net/forum/forum.php?forum_id=743930Broken Link
• http://sourceforge.net/project/shownotes.php?release_id=546000Broken Link
• http://www.securityfocus.com/archive/1/480830/100/0/threadedExploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/29422Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/30677Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2007/3464Third Party Advisory
• http://www.vupen.com/english/advisories/2007/3465Third Party Advisory
• http://www.waraxe.us/advisory-57.htmlExploit, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42425Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42733Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44455Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/5618Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/5688Exploit, Third Party Advisory, VDB Entry

Published

Oct 1, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-5150SQL injection vulnerability in the is_god function in includ…
• CVE-2007-5151SQL injection vulnerability in the abget_admin function in i…
• CVE-2007-5152Sun Java System Access Manager 7.1, when installed in a Sun …
• CVE-2007-5153Unspecified vulnerability in Sun Java System Access Manager …
• CVE-2007-5154Session fixation vulnerability in Aipo and Aipo ASP 3.0.1.0 …
• CVE-2007-5155IceGUI.DLL in ICEOWS 4.20b invokes a function with incorrect…
• CVE-2007-5157PHP remote file inclusion vulnerability in phfito-post.php i…
• CVE-2007-5158The focus handling for the onkeydown event in Microsoft Inte…
• CVE-2007-5159The ntfs-3g package before 1.913-2.fc7 in Fedora 7, and an n…
• CVE-2007-5160Multiple PHP remote file inclusion vulnerabilities in Thierr…
• CVE-2007-5161Cross-zone scripting vulnerability in the internal browser i…
• CVE-2007-5162The connect method in lib/net/http.rb in the (1) Net::HTTP a…