Published: 06/07/2006 Updated: 18/10/2018

CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9

VMScore: 515

Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in (1) Geeklog 1.4.0 up to and including 1.4.0sr3, (2) toendaCMS 1.0.0 Shizouka Stable and previous versions, (3) WeBid 0.5.4, and possibly other products, when installed on Apache with mod_mime, allows remote malicious users to upload and execute arbitrary PHP code via a filename with a .php extension and a trailing extension that is allowed, such as .zip.

Vulnerable Product	Search on Vulmon	Subscribe to Product
geeklog geeklog 1.4.0_sr3
toenda software development toendacms 0.6.1
geeklog geeklog 1.4.0_sr1
geeklog geeklog 1.4.0_sr2
geeklog geeklog 1.4.0
toenda software development toendacms 1.0
toenda software development toendacms 0.6.2
toenda software development toendacms 0.7

#!/usr/bin/php -q -d short_open_tag=on <? echo "Geeklog <= 140sr3 'f(u)ckeditor' remote commands execution\n"; echo "by rgod rgod@autisticiorg\n"; echo "site: retrogodaltervistaorg\n"; //works regardless of any phpini settings, //fckeditor (very old 'mcpuk' version) is enabled by default, //and connectorphp not protected, // ...

NVD-CWE-Other http://www.geeklog.net/article.php/exploit-for-fckeditor-filemanager http://www.geeklog.net/article.php/geeklog-1.4.0sr4 http://www.securityfocus.com/bid/18767 http://secunia.com/advisories/20886 http://retrogod.altervista.org/toenda_100_shizouka_xpl.html http://www.securityfocus.com/bid/19072 http://secunia.com/advisories/21117 http://www.securityfocus.com/bid/30950 http://www.vupen.com/english/advisories/2006/2611 http://www.vupen.com/english/advisories/2006/2868 https://exchange.xforce.ibmcloud.com/vulnerabilities/27799 https://exchange.xforce.ibmcloud.com/vulnerabilities/27494 https://exchange.xforce.ibmcloud.com/vulnerabilities/27469 https://www.exploit-db.com/exploits/6344 https://www.exploit-db.com/exploits/2035 https://www.exploit-db.com/exploits/1964 http://www.securityfocus.com/archive/1/440423/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/1964/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2006-3362

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect