Directory Traversal Vulnerabilities in FCKeditor 2.0 FC by FCKeditor

CVE-2006-0921

Summary

FCKeditor 2.0 FC has multiple directory traversal vulnerabilities in its connector.php file. Remote attackers can exploit these flaws by manipulating the CurrentFolder parameter through the use of '..' (dot dot) sequences. This exploitation allows unauthorized users to list and create arbitrary directories, potentially leading to further compromises within affected systems. Affected products like RunCMS could be at risk, particularly if properly implemented security measures are not in place.

References