CVE-2008-6951: MauryCMS 0.53.2 and earlier does not require administrative authentication for Editors/fckeditor/editor/fil...

Security readout for executives and security teams

MauryCMS 0.53.2 and earlier exposed an editor file manager page without requiring administrator authentication. An outside attacker could directly reach that page and upload arbitrary files. For a business, the concern is legacy public websites that still run this CMS or bundled FCKeditor component. Exposure is most likely on old MauryCMS sites, especially internet-facing installations with the bundled FCKeditor file manager still present. The bundle lists affected versions as 0.53.2 and earlier, but does not provide CPEs or broader product inventory details. Prioritize investigation if any public legacy MauryCMS site remains online. The issue is old, but unauthenticated file upload can become serious quickly when exposed. If no MauryCMS assets exist, document non-exposure and close as not applicable. Mitigation focus: Identify any MauryCMS 0.53.2 or earlier deployments.; Check vendor or trusted archive guidance for fixed versions or official remediation.; Remove public exposure for affected editor and file-manager paths pending remediation..

Prepared

Jun 28, 2026, 10:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.