Vulnerabilities > CVE-2006-0921 - Unspecified vulnerability in Fckeditor 2.0Fc
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
NONE Summary
Multiple directory traversal vulnerabilities in connector.php in FCKeditor 2.0 FC, as used in products such as RunCMS, allow remote attackers to list and create arbitrary directories via a .. (dot dot) in the CurrentFolder parameter to (1) GetFoldersAndFiles and (2) CreateFolder.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |