NVD

Id
62040  
Name
CVE-2006-3362  
Description
Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in (1) Geeklog 1.4.0 through 1.4.0sr3, (2) toendaCMS 1.0.0 Shizouka Stable and earlier, (3) WeBid 0.5.4, and possibly other products, when installed on Apache with mod_mime, allows remote attackers to upload and execute arbitrary PHP code via a filename with a .php extension and a trailing extension that is allowed, such as .zip.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-07-06  
Modified Date
2011-03-07  
Seq
2006-3362  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
321185 62040 CVE-2006-3362 1964  View
321186 62040 CVE-2006-3362 2035  View
321187 62040 CVE-2006-3362 http://retrogod.altervista.org/toenda_100_shizouka_xpl.html  View
321188 62040 CVE-2006-3362 http://www.geeklog.net/article.php/exploit-for-fckeditor-filemanager  View
321189 62040 CVE-2006-3362 http://www.geeklog.net/article.php/geeklog-1.4.0sr4  View
321190 62040 CVE-2006-3362 6344  View
321191 62040 CVE-2006-3362 20060717 ToendaCMS <= 1.0.0 arbitrary file upload  View
321192 62040 CVE-2006-3362 18767  View
321193 62040 CVE-2006-3362 19072  View
321194 62040 CVE-2006-3362 30950  View
321195 62040 CVE-2006-3362 ADV-2006-2611  View
321196 62040 CVE-2006-3362 ADV-2006-2868  View
321197 62040 CVE-2006-3362 geeklog-multiple-scripts-file-include(27469)  View
321198 62040 CVE-2006-3362 geeklog-connector-file-upload(27494)  View
321199 62040 CVE-2006-3362 toendacms-connector-file-upload(27799)  View

Related JVN