CVE

Id
19466  
CVE No.
CVE-2006-3362  
Status
Candidate  
Description
Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in (1) Geeklog 1.4.0 through 1.4.0sr3, (2) toendaCMS 1.0.0 Shizouka Stable and earlier, (3) WeBid 0.5.4, and possibly other products, when installed on Apache with mod_mime, allows remote attackers to upload and execute arbitrary PHP code via a filename with a .php extension and a trailing extension that is allowed, such as .zip.  
Phase
Assigned (20060706)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
174814 19466 CVE-2006-3362 BUGTRAQ:20060717 ToendaCMS <= 1.0.0 arbitrary file upload  View
174815 19466 CVE-2006-3362 URL:http://www.securityfocus.com/archive/1/archive/1/440423/100/0/threaded  View
174816 19466 CVE-2006-3362 MILW0RM:1964  View
174817 19466 CVE-2006-3362 URL:http://milw0rm.com/exploits/1964  View
174818 19466 CVE-2006-3362 MILW0RM:2035  View
174819 19466 CVE-2006-3362 URL:http://milw0rm.com/exploits/2035  View
174820 19466 CVE-2006-3362 MILW0RM:6344  View
174821 19466 CVE-2006-3362 URL:http://www.milw0rm.com/exploits/6344  View
174822 19466 CVE-2006-3362 MISC:http://retrogod.altervista.org/toenda_100_shizouka_xpl.html  View
174823 19466 CVE-2006-3362 CONFIRM:http://www.geeklog.net/article.php/exploit-for-fckeditor-filemanager  View
174824 19466 CVE-2006-3362 CONFIRM:http://www.geeklog.net/article.php/geeklog-1.4.0sr4  View
174825 19466 CVE-2006-3362 BID:18767  View
174826 19466 CVE-2006-3362 URL:http://www.securityfocus.com/bid/18767  View
174827 19466 CVE-2006-3362 BID:19072  View
174828 19466 CVE-2006-3362 URL:http://www.securityfocus.com/bid/19072  View
174829 19466 CVE-2006-3362 BID:30950  View
174830 19466 CVE-2006-3362 URL:http://www.securityfocus.com/bid/30950  View
174831 19466 CVE-2006-3362 VUPEN:ADV-2006-2611  View
174832 19466 CVE-2006-3362 URL:http://www.vupen.com/english/advisories/2006/2611  View
174833 19466 CVE-2006-3362 VUPEN:ADV-2006-2868  View
174834 19466 CVE-2006-3362 URL:http://www.vupen.com/english/advisories/2006/2868  View
174835 19466 CVE-2006-3362 SECUNIA:20886  View
174836 19466 CVE-2006-3362 URL:http://secunia.com/advisories/20886  View
174837 19466 CVE-2006-3362 SECUNIA:21117  View
174838 19466 CVE-2006-3362 URL:http://secunia.com/advisories/21117  View
174839 19466 CVE-2006-3362 XF:geeklog-multiple-scripts-file-include(27469)  View
174840 19466 CVE-2006-3362 URL:http://xforce.iss.net/xforce/xfdb/27469  View
174841 19466 CVE-2006-3362 XF:geeklog-connector-file-upload(27494)  View
174842 19466 CVE-2006-3362 URL:http://xforce.iss.net/xforce/xfdb/27494  View
174843 19466 CVE-2006-3362 XF:toendacms-connector-file-upload(27799)  View

Related JVN