CVE-2006-6690

no score yetEPSS 6.3%

rtehtmlarea/pi1/class.tx_rtehtmlarea_pi1.php in Typo3 4.0.0 through 4.0.3, 3.7 and 3.8 with the rtehtmlarea extension, and 4.1 beta allows remote authenticated users to execute arbitrary commands via shell metacharacters in the userUid parameter to rtehtmlarea/htmlarea/plugins/SpellChecker/spell-check-logic.php, and possibly another vector.

EPSS: 6.3% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
Published: 2006-12-21
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

typo3:typo3

References

http://lists.netfielders.de/pipermail/typo3-announce/2006/000045.html
http://lists.netfielders.de/pipermail/typo3-announce/2006/000046.html
http://secunia.com/advisories/23446
http://secunia.com/advisories/23466
http://securityreason.com/securityalert/2056

Check your stack JSON