NVD

Id
59648  
Name
CVE-2006-0921  
Description
Multiple directory traversal vulnerabilities in connector.php in FCKeditor 2.0 FC, as used in products such as RunCMS, allow remote attackers to list and create arbitrary directories via a .. (dot dot) in the CurrentFolder parameter to (1) GetFoldersAndFiles and (2) CreateFolder.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-02-28  
Modified Date
2008-09-05  
Seq
2006-0921  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
306819 59648 CVE-2006-0921 484  View
306820 59648 CVE-2006-0921 http://www.nsag.ru/vuln/952.html  View
306821 59648 CVE-2006-0921 20060223 NSA Group Security Advisory NSAG-¹195-23.02.2006 Vulnerability FCKeditor 2.0 FC  View
306822 59648 CVE-2006-0921 20060519 Re: NSA Group Security Advisory NSAG-¹195-23.02.2006 Vulnerability FCKeditor 2.0 FC  View
306823 59648 CVE-2006-0921 fckeditor-connector-obtain-information(24878)  View

Related JVN