Lucene search
HistoryFeb 28, 2006 - 11:02 a.m.
CVE-2006-0921
cve
2006
0921
directory traversal
connector.php
fckeditor 2.0 fc
runcms
nvd
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
7 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
78.5%
Multiple directory traversal vulnerabilities in connector.php in FCKeditor 2.0 FC, as used in products such as RunCMS, allow remote attackers to list and create arbitrary directories via a … (dot dot) in the CurrentFolder parameter to (1) GetFoldersAndFiles and (2) CreateFolder.
Affected configurations
Node
fckeditorfckeditorMatch2.0_fc
| CPE | Name | Operator | Version |
|---|---|---|---|
| fckeditor:fckeditor | fckeditor | eq | 2.0_fc |
Related
prion
prion
Directory traversal
2006-02-28 11:02:00
nvd
nvd
CVE-2006-0921
2006-02-28 11:02:00
cvelist
cvelist
CVE-2006-0921
2006-02-28 11:00:00
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
7 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
78.5%
Related for CVE-2006-0921