medium6.4
CVE-2006-0921
Multiple directory traversal vulnerabilities in connector.php in FCKeditor 2.0 FC, as used in products such as RunCMS, allow remote attackers to list and creat…
Impact
Multiple directory traversal vulnerabilities in connector.php in FCKeditor 2.0 FC, as used in products such as RunCMS, allow remote attackers to list and create arbitrary directories via a .. (dot dot) in the CurrentFolder parameter to (1) GetFoldersAndFiles and (2) CreateFolder.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fckeditor | Fckeditor | Version 2.0_fc |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/484
- http://www.nsag.ru/vuln/952.html
- http://www.securityfocus.com/archive/1/425937/100/0/threaded
- http://www.securityfocus.com/archive/1/434559/30/4890/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24878
- http://securityreason.com/securityalert/484
- http://www.nsag.ru/vuln/952.html
- http://www.securityfocus.com/archive/1/425937/100/0/threaded
- http://www.securityfocus.com/archive/1/434559/30/4890/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24878