CVEvulnerability

CVE-2011-3993

5.5 MEDIUM Published 2011-11-03 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-11-03
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.5 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:P
Weaknesses
CWE-264

Description

SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2 and earlier, MailPack 1.741 and earlier, and AutoTagging 0.08 and earlier plugins for Movable Type, uses weak permissions, which allows remote authenticated users to modify files and settings via unspecified vectors.

Affected configurations

• skyarc autotagging (<= 0.08) • skyarc duplicateentry (<= 1.2) • skyarc mailpack (<= 1.741) • skyarc mtcms (<= 5.251) • skyarc mtcms 5.2 • skyarc mtcms 5.21 • skyarc mtcms 5.22 • skyarc mtcms 5.23 • skyarc mtcms 5.24 • skyarc mtcms 5.25 • skyarc mtcms 5.251 • skyarc multifileuploader (<= 0.44)

Related

Weakness · not in database (1)

References