CVE-2006-6690

rtehtmlarea/pi1/class.tx_rtehtmlarea_pi1.php in Typo3 4.0.0 through 4.0.3, 3.7 and 3.8 with the rtehtmlarea extension, and 4.1 beta allows remote authenticated…

published December 21, 2006

CVSS
—
EPSS
6%
Percentile
93.6
In the wild
Unconfirmed
What it is

rtehtmlarea/pi1/class.tx_rtehtmlarea_pi1.php in Typo3 4.0.0 through 4.0.3, 3.7 and 3.8 with the rtehtmlarea extension, and 4.1 beta allows remote authenticated users to execute arbitrary commands via shell metacharacters in the userUid parameter to rtehtmlarea/htmlarea/plugins/SpellChecker/spell-check-logic.php, and possibly another vector.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06326 · 93.6th percentile
Published
2006-12-21T21:00Z
EPSS history
Timeline
  • 21 DEC 21:00Z
    rtehtmlarea/pi1/class.tx_rtehtmlarea_pi1.php in Typo3 4.0.0 through 4.0.3, 3.7 and 3.8 with the rtehtmlarea extension, and 4.1 beta allows remote authenticated…
    cvelistv5