Using HTMLArea's image editor plugin a web user could upload or remove image files from the server. A user could point his browser to the following url to access the editor:
manager/media/editor/plugins/ImageManager/manager.php
Although the user will not be able to upload harmful files, they could still disfigure a website.
This bug affects Etomite 0.6 and versions less than MODx2 TP2
Here's the quick fix:
Open manager/media/editor/plugins/ImageManager/config.inc.php and add the following at line 13:
// security check user MUST be logged into manager
// before being able to run this script
session_start();
if(!isset($_SESSION['validated'])) {
die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the MODx Content Manager instead of accessing this file directly.");
}
MODX Staff