CVE-2006-3362

no score yetEPSS 5.1%

No CVSS score yet. EPSS 5.1% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in (1) Geeklog 1.4.0 through 1.4.0sr3, (2) toendaCMS 1.0.0 Shizouka Stable and earlier, (3) WeBid 0.5.4, and possibly other products, when installed on Apache with mod_mime, allows remote attackers to upload and execute arbitrary PHP code via a filename with a .php extension and a trailing extension that is allowed, such as .zip.

EPSS: 5.1% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
Published: 2006-07-06
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

geeklog:geeklog
toenda_software_development:toendacms

References

http://retrogod.altervista.org/toenda_100_shizouka_xpl.html
http://secunia.com/advisories/20886
http://secunia.com/advisories/21117
http://www.geeklog.net/article.php/exploit-for-fckeditor-filemanager
http://www.geeklog.net/article.php/geeklog-1.4.0sr4

Check your stack JSON