+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: LifeRay CMS (Fckeditor) Arbitrary File Upload Vulnerability (/showthread.php?tid=6071809)
LifeRay CMS (Fckeditor) Arbitrary File Upload Vulnerability - OfficeInboxer - Apr 26, 2020
+] Title: LifeRay File Upload (CKEditor Vulnerable)
[+] Date: 2020-04-20
[+] Vendor Homepage: www.liferay.com
[+] Software Link: www.liferay.com
[+] Tested on: Windows 10 & Google Chrome
[+] Version : All Versions
[+] Category : Web Application Bugs
[+] Vulnerable File: /browser.html
[+} Dork : inurl:/ckeditor/editor/filemanager/
### POC:
[+] Exploit : site.com/html/js/editor/ckeditor/editor/filemanager/browser/liferay/browser.html
### Note:
If you are careful, in the exploit that friends find, it is in the folder (FCKeditor) and the exploit that I found is in the folder (CKeditor).
This exploit has been tested in all versions of LifeRay and the file can be uploaded in all tested sites.
Exploits found by friends (note the folder "FCKeditor"):
/html/js/editor/fckeditor/editor/filemanager/browser/liferay/browser.html Newly discovered exploits (see folder "CKeditor"):
/html/js/editor/ckeditor/editor/filemanager/browser/liferay/browser.html
LifeRay allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. Uploaded files represent a significant risk to applications.
RE: LifeRay CMS (Fckeditor) Arbitrary File Upload Vulnerability - m0dvi3w - Apr 27, 2020
This vuln is old AF, but is still out there. Also there is wayy more you can do than just that POC ;)
RE: LifeRay CMS (Fckeditor) Arbitrary File Upload Vulnerability - frank3nstien - Apr 27, 2020
This is really old mate, why don't you check history before 😤
RE: LifeRay CMS (Fckeditor) Arbitrary File Upload Vulnerability - goratberom - Mar 28, 2021
indeed old but if it is valid