CVE

Id
22794  
CVE No.
CVE-2006-6690  
Status
Candidate  
Description
rtehtmlarea/pi1/class.tx_rtehtmlarea_pi1.php in Typo3 4.0.0 through 4.0.3, 3.7 and 3.8 with the rtehtmlarea extension, and 4.1 beta allows remote authenticated users to execute arbitrary commands via shell metacharacters in the userUid parameter to rtehtmlarea/htmlarea/plugins/SpellChecker/spell-check-logic.php, and possibly another vector.  
Phase
Assigned (20061221)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
220375 22794 CVE-2006-6690 BUGTRAQ:20061220 SEC Consult SA-20061220-0 :: Typo3 Command Execution Vulnerability  View
220376 22794 CVE-2006-6690 URL:http://www.securityfocus.com/archive/1/archive/1/454944/100/0/threaded  View
220377 22794 CVE-2006-6690 MLIST:[TYPO3-announce] 20061219 Pre-announcement for important security update  View
220378 22794 CVE-2006-6690 URL:http://lists.netfielders.de/pipermail/typo3-announce/2006/000045.html  View
220379 22794 CVE-2006-6690 MLIST:[TYPO3-announce] 20061220 TYPO3 Security Bulletin TYPO3-20061220-1: Remote Command Execution in TYPO3  View
220380 22794 CVE-2006-6690 URL:http://lists.netfielders.de/pipermail/typo3-announce/2006/000046.html  View
220381 22794 CVE-2006-6690 MISC:http://www.sec-consult.com/272.html  View
220382 22794 CVE-2006-6690 CONFIRM:http://typo3.org/news-single-view/?tx_newsimporter_pi1%5BshowItem%5D=0&cHash=e4a40a11a9  View
220383 22794 CVE-2006-6690 BID:21680  View
220384 22794 CVE-2006-6690 URL:http://www.securityfocus.com/bid/21680  View
220385 22794 CVE-2006-6690 VUPEN:ADV-2006-5094  View
220386 22794 CVE-2006-6690 URL:http://www.vupen.com/english/advisories/2006/5094  View
220387 22794 CVE-2006-6690 SECTRACK:1017428  View
220388 22794 CVE-2006-6690 URL:http://securitytracker.com/id?1017428  View
220389 22794 CVE-2006-6690 SECUNIA:23446  View
220390 22794 CVE-2006-6690 URL:http://secunia.com/advisories/23446  View
220391 22794 CVE-2006-6690 SECUNIA:23466  View
220392 22794 CVE-2006-6690 URL:http://secunia.com/advisories/23466  View
220393 22794 CVE-2006-6690 SREASON:2056  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61389 JVNDB-2006-003655 zabbix におけるフォーマットストリングの脆弱性 zabbix には、フォーマットストリングの脆弱性が存在します。 CVE-2006-6692 22794 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003655.html  View