CVE-2006-3362
Estado: ModificadaMedia (5.1)—
Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in (1) Geeklog 1.4.0 through 1.4.0sr3, (2) toendaCMS 1.0.0 Shizouka Stable and earlier, (3) WeBid 0.5.4, and possibly other products, when installed on Apache with mod_mime, allows remote attackers to upload and execute arbitrary PHP code via a filename with a .php extension and a trailing extension that is allowed, such as .zip.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
- Puntuación base: 5.1
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 5.06%
- Percentil entre todas las CVEs puntuadas: 92
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- NVD-CWE-Other
Referencias
- http://retrogod.altervista.org/toenda_100_shizouka_xpl.html
- http://secunia.com/advisories/20886
- http://secunia.com/advisories/21117
- http://www.geeklog.net/article.php/exploit-for-fckeditor-filemanager
- http://www.geeklog.net/article.php/geeklog-1.4.0sr4
- http://www.securityfocus.com/archive/1/440423/100/0/threaded
- http://www.securityfocus.com/bid/18767
- http://www.securityfocus.com/bid/19072
- http://www.securityfocus.com/bid/30950
- http://www.vupen.com/english/advisories/2006/2611
- http://www.vupen.com/english/advisories/2006/2868
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27469
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27494
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27799
- https://www.exploit-db.com/exploits/1964
- https://www.exploit-db.com/exploits/2035
- https://www.exploit-db.com/exploits/6344
- http://retrogod.altervista.org/toenda_100_shizouka_xpl.html
- http://secunia.com/advisories/20886
- http://secunia.com/advisories/21117
- http://www.geeklog.net/article.php/exploit-for-fckeditor-filemanager
- http://www.geeklog.net/article.php/geeklog-1.4.0sr4
- http://www.securityfocus.com/archive/1/440423/100/0/threaded
- http://www.securityfocus.com/bid/18767
- http://www.securityfocus.com/bid/19072
- http://www.securityfocus.com/bid/30950
- http://www.vupen.com/english/advisories/2006/2611
- http://www.vupen.com/english/advisories/2006/2868
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27469
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27494
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27799
- https://www.exploit-db.com/exploits/1964
- https://www.exploit-db.com/exploits/2035
- https://www.exploit-db.com/exploits/6344
JSON original (NVD)
Mostrar
{
"id": "CVE-2006-3362",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5.1,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "HIGH",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 4.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": true,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2006-07-06T20:05:00.000",
"references": [
{
"url": "http://retrogod.altervista.org/toenda_100_shizouka_xpl.html",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/20886",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/21117",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.geeklog.net/article.php/exploit-for-fckeditor-filemanager",
"source": "cve@mitre.org"
},
{
"url": "http://www.geeklog.net/article.php/geeklog-1.4.0sr4",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/archive/1/440423/100/0/threaded",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/18767",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/19072",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/30950",
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2006/2611",
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2006/2868",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27469",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27494",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27799",
"source": "cve@mitre.org"
},
{
"url": "https://www.exploit-db.com/exploits/1964",
"source": "cve@mitre.org"
},
{
"url": "https://www.exploit-db.com/exploits/2035",
"source": "cve@mitre.org"
},
{
"url": "https://www.exploit-db.com/exploits/6344",
"source": "cve@mitre.org"
},
{
"url": "http://retrogod.altervista.org/toenda_100_shizouka_xpl.html",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/20886",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/21117",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.geeklog.net/article.php/exploit-for-fckeditor-filemanager",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.geeklog.net/article.php/geeklog-1.4.0sr4",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/440423/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/18767",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/19072",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/30950",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2006/2611",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2006/2868",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27469",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27494",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27799",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.exploit-db.com/exploits/1964",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.exploit-db.com/exploits/2035",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.exploit-db.com/exploits/6344",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in (1) Geeklog 1.4.0 through 1.4.0sr3, (2) toendaCMS 1.0.0 Shizouka Stable and earlier, (3) WeBid 0.5.4, and possibly other products, when installed on Apache with mod_mime, allows remote attackers to upload and execute arbitrary PHP code via a filename with a .php extension and a trailing extension that is allowed, such as .zip."
},
{
"lang": "es",
"value": "connectors/php/connector.php en el gestor de fichero mcpuk de FCKEditor usado en (1) Geeklog 1.4.0 a la v1.4.0sr3, (2) toendaCMS 1.0.0 Shizouka Stable y anteriores, y posiblemente otros productos, cuando se instala sobre Apache con mod_mime, permite a atacantes remotos subir y ejecutar código PHP de su elección a través de un fichero con la extensión .php y rastreando la extensión que está permitida como por ejemplo .zip."
}
],
"lastModified": "2026-06-16T22:26:55.027",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:geeklog:geeklog:1.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B89E7A29-0EAE-4BB0-B0DD-0B5B55F80453"
},
{
"criteria": "cpe:2.3:a:geeklog:geeklog:1.4.0_sr1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA0DFD93-BA8A-49BE-9063-E40AC757708A"
},
{
"criteria": "cpe:2.3:a:geeklog:geeklog:1.4.0_sr2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E07EB8A-5B67-41B9-8358-1CE59E1B6E09"
},
{
"criteria": "cpe:2.3:a:geeklog:geeklog:1.4.0_sr3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A3EAF15E-44B6-44F6-B794-2DF571131415"
},
{
"criteria": "cpe:2.3:a:toenda_software_development:toendacms:0.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB6C4C75-D481-4B53-B94B-C92B8EFCC4F2"
},
{
"criteria": "cpe:2.3:a:toenda_software_development:toendacms:0.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95B16BFA-7796-45FF-813B-987B5F9BB635"
},
{
"criteria": "cpe:2.3:a:toenda_software_development:toendacms:0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4DEB50B9-4BF5-4815-87F4-67C868979805"
},
{
"criteria": "cpe:2.3:a:toenda_software_development:toendacms:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E3A79A9-C696-4B6F-92C3-9ED496D636FE"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org",
"evaluatorSolution": "Upgrade to Geeklog version 1.4.0sr4 :\r\nhttp://www.geeklog.net/filemgmt/index.php?id=727"
}