CVE-2006-3362

Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in (1) Geeklog 1.4.0 through 1.4.0sr3, (2)…

published July 6, 2006

CVSS
—
EPSS
5%
Percentile
92.3
In the wild
Unconfirmed
What it is

Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in (1) Geeklog 1.4.0 through 1.4.0sr3, (2) toendaCMS 1.0.0 Shizouka Stable and earlier, (3) WeBid 0.5.4, and possibly other products, when installed on Apache with mod_mime, allows remote attackers to upload and execute arbitrary PHP code via a filename with a .php extension and a trailing extension that is allowed, such as .zip.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05061 · 92.3th percentile
Published
2006-07-06T20:00Z
EPSS history
Timeline
  • 06 JUL 20:00Z
    Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in (1) Geeklog 1.4.0 through 1.4.0sr3, (2)…
    cvelistv5