CVE-2008-6951: cms.maury91 Maurycms

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

MauryCMS 0.53.2 and earlier does not require administrative authentication for Editors/fckeditor/editor/filemanager/browser/default/browser.html, which allows remote attackers to upload arbitrary files via a direct request.

Affected products

Published 2009-08-12. Last modified 2026-06-16.