VulnCheck KEV: CVE-2006-2529

editor/filemanager/upload/php/upload.php in FCKeditor before 2.3 Beta, when the upload feature is enabled, does not verify the Type parameter, which allows remote attackers to upload arbitrary file types. NOTE: It is not clear whether this is related to CVE-2006-0658...

CVE-2006-2529

The FCKeditor software (versions prior to 2.3 Beta ) is vulnerable to an arbitrary file upload flaw in the editor/filemanager/upload/php/upload.php component. When the upload feature is enabled, the application fails to verify the Type parameter, allowing remote attackers to upload files of arbit...