CVE-2006-0658
- State
- Published
- Severity
- Not scored
- Published
- Feb 13, 2006
- Updated
- Aug 7, 2024
- Reserved
- Feb 13, 2006
Description
Incomplete blacklist vulnerability in connector.php in FCKeditor 2.0 and 2.2, as used in products such as RunCMS, allows remote attackers to upload and execute arbitrary script files by giving the files specific extensions that are not listed in the Config[DeniedExtensions][File], such as .php.txt.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://retrogod.altervista.org/fckeditor_22_xpl.html
- ADV-2006-0502vdb-entry
- 20060209 runCMS <= 1.3a2 possible remote code execution through the integrated FCKEditor packagemailing-list
- 18767third-party-advisory
- 3702exploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.