NVD

Id
65234  
Name
CVE-2006-6690  
Description
rtehtmlarea/pi1/class.tx_rtehtmlarea_pi1.php in Typo3 4.0.0 through 4.0.3, 3.7 and 3.8 with the rtehtmlarea extension, and 4.1 beta allows remote authenticated users to execute arbitrary commands via shell metacharacters in the userUid parameter to rtehtmlarea/htmlarea/plugins/SpellChecker/spell-check-logic.php, and possibly another vector.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-12-21  
Modified Date
2011-03-07  
Seq
2006-6690  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
340448 65234 CVE-2006-6690 [TYPO3-announce] 20061219 Pre-announcement for important security update  View
340449 65234 CVE-2006-6690 [TYPO3-announce] 20061220 TYPO3 Security Bulletin TYPO3-20061220-1: Remote Command Execution in TYPO3  View
340450 65234 CVE-2006-6690 2056  View
340451 65234 CVE-2006-6690 1017428  View
340452 65234 CVE-2006-6690 http://typo3.org/news-single-view/?tx_newsimporter_pi1%5BshowItem%5D=0&cHash=e4a40a11a9  View
340453 65234 CVE-2006-6690 http://www.sec-consult.com/272.html  View
340454 65234 CVE-2006-6690 20061220 SEC Consult SA-20061220-0 :: Typo3 Command Execution Vulnerability  View
340455 65234 CVE-2006-6690 21680  View
340456 65234 CVE-2006-6690 ADV-2006-5094  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61387 JVNDB-2006-003653 Typo3 の rtehtmlarea/pi1/class.tx_rtehtmlarea_pi1.php における任意のコマンドを実行される脆弱性 rtehtmlarea エクステンションを伴う Typo3 の rtehtmlarea/pi1/class.tx_rtehtmlarea_pi1.php には、任意のコマンドを実行される脆弱性が存在します。 CVE-2006-6690 22792 CVE-2006-6690 65234 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003653.html 2006-12-21 2012-12-20 View