CVE-2006-0921: Fckeditor

Medium severity, CVSS 6.4. EPSS: 1.7% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in connector.php in FCKeditor 2.0 FC, as used in products such as RunCMS, allow remote attackers to list and create arbitrary directories via a .. (dot dot) in the CurrentFolder parameter to (1) GetFoldersAndFiles and (2) CreateFolder.

Affected products

• Fckeditor Fckeditor: version 2.0_fc only

Published 2006-02-28. Last modified 2026-06-16.