Time to alert “Sparkasse Bank Macedonia” before someone hack them..
Again the same vulnerable CMS in one of the EUROPE’S famous bank in Macedonia. I published the FCKEDITOR hack before one and a half years a go. And like I see that there is no any positive wish to fix this RISK that is coming with the FCKEDITOR. Unfortunately a famous bank is also using this EDITOR for their web site SPARKASSE.COM.MK of Republic of Macedonia which have the exploitable version of FCKEDITOR.
The POC the proof of concept is very simple:
site:MK inurl:WEBARCHITECT and you will see the address http://www.sparkasse.com.mk/
and the second step is just to paste the code:
This will activate the Directory Traversal Attack