CVEvulnerability
CVE-2006-5258
5.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-10-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-94
Description
The spell checking component of (1) Asbru Web Content Management before 6.1.22, (2) Asbru Web Content Editor before 6.0.22, and (3) Asbru Website Manager before 6.0.22 allows remote attackers to execute arbitrary commands via an unspecified parameter that is not sanitized before Aspell is invoked.
Affected configurations
• asbru software asbru web content management (<= 6.1.20)
• asbru software asbru web content management 6.0
• asbru software asbru web content management 6.0.17
• asbru software asbru web content management 6.1
• asbru software asbru web content management 6.1.19
• asbru software asbru website manager 6.0.20
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0306.html archives.neohapsis.com
- http://editor.asbrusoft.com/page.php/id=727 editor.asbrusoft.com
- http://secunia.com/advisories/22344 Patch, Vendor Advisory
- http://secunia.com/advisories/22353 secunia.com
- http://secunia.com/advisories/22472 Vendor Advisory
- http://wcm.asbrusoft.com/page.php/id=791 Patch
- http://www.securityfocus.com/bid/20544 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/4004 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/4060 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/4061 Vendor Advisory
- http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0306.html archives.neohapsis.com
- http://editor.asbrusoft.com/page.php/id=727 editor.asbrusoft.com
- http://secunia.com/advisories/22344 Patch, Vendor Advisory
- http://secunia.com/advisories/22353 secunia.com
- http://secunia.com/advisories/22472 Vendor Advisory
- http://wcm.asbrusoft.com/page.php/id=791 Patch
- http://www.securityfocus.com/bid/20544 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/4004 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/4060 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/4061 Vendor Advisory