CVE-2006-5258

2006-10-1222:00:00

mitre

www.cve.org

7.7 High

AI Score

Confidence

High

0.086 Low

EPSS

Percentile

94.5%

JSON

The spell checking component of (1) Asbru Web Content Management before 6.1.22, (2) Asbru Web Content Editor before 6.0.22, and (3) Asbru Website Manager before 6.0.22 allows remote attackers to execute arbitrary commands via an unspecified parameter that is not sanitized before Aspell is invoked.

References

archives.neohapsis.com/archives/fulldisclosure/2006-10/0306.html

editor.asbrusoft.com/page.php/id=727

secunia.com/advisories/22344

secunia.com/advisories/22353

secunia.com/advisories/22472

wcm.asbrusoft.com/page.php/id=791

www.securityfocus.com/bid/20544

www.vupen.com/english/advisories/2006/4004

www.vupen.com/english/advisories/2006/4060

www.vupen.com/english/advisories/2006/4061