CVE-2007-0147: Cuyahoga

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

Cuyahoga before 1.0.1 installs the FCKEditor component with an incorrect deny statement in a Web.config file, which allows remote attackers to upload files when these privileges were intended only for the Administrator and Editor roles.

Affected products

• Cuyahoga Cuyahoga: up to and including 1.0.0

Published 2007-01-09. Last modified 2026-06-16.