Lucene search
K

27 matches found

CVE
CVE
added 2006/02/28 11:0 a.m.56 views

CVE-2006-0921

CVE-2006-0921 involves multiple directory traversal vulnerabilities in connector.php of FCKeditor 2.0 FC, used in products such as RunCMS. The issue allows remote attackers to list and create arbitrary directories by sending a .. payload in the CurrentFolder parameter to GetFoldersAndFiles and Cr...

6.4CVSS7AI score0.01628EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2006/02/28 11:0 a.m.24 views

CVE-2006-0922

CubeCart 3.0 through 3.6 does not properly check authorization for an administration session because of a missing auth.inc.php include, which results in an absolute path traversal vulnerability in FileUpload in connector.php aka upload.php that allows remote attackers to upload arbitrary files vi...

6.8AI score0.07963EPSS
Exploits0References10
CVE
CVE
added 2006/02/13 11:0 a.m.55 views

CVE-2006-0658

Vulnerability family: incomplete blacklist in FCKeditor. Affected: FCKeditor 2.0/2.2 as used in RunCMS and related products. Issue: remote attackers can upload and execute arbitrary script files by using extensions not listed in Config[DeniedExtensions][File] (e.g., .php.txt) due to inadequate ex...

5CVSS7AI score0.06744EPSS
Exploits1References5Affected Software1
exploitpack
exploitpack
added 2006/02/09 12:0 a.m.15 views

FCKEditor 2.0 2.2 - FileManager connector.php Arbitrary File Upload

FCKEditor 2.0 2.2 - FileManager connector.php Arbitrary File Upload a short explaination: if a user cam call directly http://target/path/editor/filemanager/browser/default/connectors/php/connector.php he can upload malicious contempt on a target server, including arbitrary php code, and launch...

0.2AI score
Exploits0
NVD
NVD
added 2005/12/08 11:3 a.m.8 views

CVE-2005-4095

Directory traversal vulnerability in connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to list arbitrary files and directories via ".." sequences in the Type parameter in a GetFoldersAndFiles command...

5CVSS6.8AI score0.08473EPSS
Exploits1References8
exploitpack
exploitpack
added 2005/12/06 12:0 a.m.11 views

DoceboLms 2.0.x - connector.php Directory Traversal

DoceboLms 2.0.x - connector.php Directory Traversal source: https://www.securityfocus.com/bid/15742/info DoceboLMS is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerabilit...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2005/12/04 12:0 a.m.36 views

DoceboLms 2.0.4 - 'connector.php' Arbitrary File Upload

DoceboLMS body background-color:111111; SCROLLBAR-ARROW-COLOR: ffffff; SCROLLBAR-BASE-COLOR: black; CURSOR: crosshair; color: 1CB081; img background-color: FFFFFF !important input background-color: 303030 !important option background-color: 303030 !important textarea background-color: 303030...

7.4AI score
Exploits0
Rows per page
Query Builder