Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2006-6690
7.5
HIGHCVSS v2
Published
December 21, 2006
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
rtehtmlarea/pi1/class.tx_rtehtmlarea_pi1.php in Typo3 4.0.0 through 4.0.3, 3.7 and 3.8 with the rtehtmlarea extension, and 4.1 beta allows remote authenticated users to execute arbitrary commands via shell metacharacters in the userUid parameter to rtehtmlarea/htmlarea/plugins/SpellChecker/spell-check-logic.php, and possibly another vector.
TYPO3/typo3
GitHubThe TYPO3 Core - Enterprise Content Management System. Synchronized mirror of https://review.typo3.org/q/project:Packages/TYPO3.CMS
GitHubThe TYPO3 Core - Enterprise Content Management System. Synchronized mirror of https://review.typo3.org/q/project:Packages/TYPO3.CMS= 4.0.3, = 4.0.1, = 4.0.2, = 4.0, = 3.7.0, = 3.8NVD