medium5.0Public exploit code
CVE-2006-0658
Incomplete blacklist vulnerability in connector.php in FCKeditor 2.0 and 2.2, as used in products such as RunCMS, allows remote attackers to upload and execute…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- InoutMailingListManager 3.1 - Remote Command Execution2007-04-10 · webapps · php · Verified
- FCKEditor 2.0 < 2.2 - 'FileManager connector.php' Arbitrary File Upload2006-02-09 · webapps · php · Verified
Impact
Incomplete blacklist vulnerability in connector.php in FCKeditor 2.0 and 2.2, as used in products such as RunCMS, allows remote attackers to upload and execute arbitrary script files by giving the files specific extensions that are not listed in the Config[DeniedExtensions][File], such as .php.txt.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fckeditor | Fckeditor | Versions 2.0, 2.2 |
References
- NVD record
- CVE.org record
- http://retrogod.altervista.org/fckeditor_22_xpl.html
- http://secunia.com/advisories/18767
- http://www.securityfocus.com/archive/1/424708
- http://www.vupen.com/english/advisories/2006/0502
- https://www.exploit-db.com/exploits/3702
- http://retrogod.altervista.org/fckeditor_22_xpl.html
- http://secunia.com/advisories/18767
- http://www.securityfocus.com/archive/1/424708
- http://www.vupen.com/english/advisories/2006/0502
- https://www.exploit-db.com/exploits/3702