Vulnerabilities > CVE-2006-0921 - Unspecified vulnerability in Fckeditor 2.0Fc

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
fckeditor
NVD
Published: 2006-02-28
Updated: 2024-11-21

Summary

Multiple directory traversal vulnerabilities in connector.php in FCKeditor 2.0 FC, as used in products such as RunCMS, allow remote attackers to list and create arbitrary directories via a .. (dot dot) in the CurrentFolder parameter to (1) GetFoldersAndFiles and (2) CreateFolder.

Vulnerable Configurations

Part Description Count
Application
Fckeditor
1

References