Beveiligingsadvies

CVE-2006-0921

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2006-02-28 11:00:00
Laatst bijgewerkt 2024-08-07 16:56:13
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Multiple directory traversal vulnerabilities in connector.php in FCKeditor 2.0 FC, as used in products such as RunCMS, allow remote attackers to list and create arbitrary directories via a .. (dot dot) in the CurrentFolder parameter to (1) GetFoldersAndFiles and (2) CreateFolder.