| Package | Affected versions | Patched versions |
|---|---|---|
| fckeditor | = 2.2 |
editor/filemanager/upload/php/upload.php in FCKeditor before 2.3 Beta, when the upload feature is enabled, does not verify the Type parameter, which allows remote attackers to upload arbitrary file types. NOTE: It is not clear whether this is related to CVE-2006-0658.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free