CVE-2006-0658

概要

参考情報

• retrogod.altervista.org/fckeditor_22_xpl.html · Exploit
• secunia.com/advisories/18767 · Vendor Advisory
• securityfocus.com/archive/1/424708 · Exploit
• vupen.com/english/advisories/2006/0502 · Vendor Advisory
• exploit-db.com/exploits/3702

fckeditor のその他の脆弱性

• CVE-2009-2324中 4.3Multiple cross-site scripting (XSS) vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to inject arbitrary web script or HTM…
• CVE-2009-2265高 7.5Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable files in arbitrary dire…
• CVE-2008-6178高 7.5Unrestricted file upload vulnerability in editor/filemanager/browser/default/connectors/php/connector.php in FCKeditor 2.2, as used in Falt4…
• CVE-2006-2529中 5.0editor/filemanager/upload/php/upload.php in FCKeditor before 2.3 Beta, when the upload feature is enabled, does not verify the Type paramete…
• CVE-2006-0921中 6.4Multiple directory traversal vulnerabilities in connector.php in FCKeditor 2.0 FC, as used in products such as RunCMS, allow remote attacker…