CVE:CVE-2006-0921
CNNVD:CNNVD-200602-442
FCKeditor 2.0 FC的connector.php存在多个目录遍历漏洞，用在RunCMS等产品中时，可使远程攻击者借助指向(1) GetFoldersAndFiles和(2) CreateFolder的CurrentFolder参数（该参数中包含..）列出并创建任意目录。
solution:Upgrade fckeditor fckeditor to a higher version than 2.0_fc,and avoid the version 2.0_fc