CVE-2021-47751

HIGH

7.5

Beschreibung

CuteEditor for PHP (now referred to as Rich Text Editor) 6.6 contains a directory traversal vulnerability in the browse template feature that allows attackers to write files to arbitrary web root directories. Attackers can exploit the ServerMapPath() function by renaming uploaded HTML files using directory traversal sequences to write files outside the intended template directory.

CVE Details

CVSS v3.1 Bewertung7.5

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht1/13/2026

Zuletzt geandert2/2/2026

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

phphtmledit:rich_text_editor

Schwachen (CWE)

CWE-22

Referenzen

http://phphtmledit.com/(disclosure@vulncheck.com)

https://www.exploit-db.com/exploits/50994(disclosure@vulncheck.com)

https://www.vulncheck.com/advisories/cuteeditor-for-php-directory-traversal(disclosure@vulncheck.com)

https://www.exploit-db.com/exploits/50994(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.