CVE-2006-0921: Medium severity FCKeditor FCKeditor vulnerability
Multiple directory traversal vulnerabilities in connector.php in FCKeditor 2.0 FC, as used in products such as RunCMS, allow remote attackers to list and create arbitrary directories via a .. (dot dot) in the CurrentFolder parameter to (1) GetFoldersAndFiles and (2) CreateFolder.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0921?
CVE-2006-0921 is classified as a medium severity vulnerability due to its exploitation risk.
How do I fix CVE-2006-0921?
To address CVE-2006-0921, upgrade to a version of FCKeditor that is not vulnerable to directory traversal attacks.
What kind of attacks can exploit CVE-2006-0921?
CVE-2006-0921 can be exploited to perform unauthorized directory listing and creation via crafted requests.
Which versions of FCKeditor are affected by CVE-2006-0921?
CVE-2006-0921 specifically impacts FCKeditor version 2.0 FC.
Can CVE-2006-0921 lead to further compromises?
Yes, an attacker exploiting CVE-2006-0921 can potentially gain access to sensitive directories and files.