CVE-2006-5258

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-10-12 · updated 2026-06-16
Weakness: CWE-94

Description

The spell checking component of (1) Asbru Web Content Management before 6.1.22, (2) Asbru Web Content Editor before 6.0.22, and (3) Asbru Website Manager before 6.0.22 allows remote attackers to execute arbitrary commands via an unspecified parameter that is not sanitized before Aspell is invoked.

Affected products

Asbru Software Asbru Web Content Management: through 6.1.20; 6.0, 6.0.17, 6.1, 6.1.19
Asbru Software Asbru Website Manager: 6.0.20

References

http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0306.html
http://editor.asbrusoft.com/page.php/id=727
http://secunia.com/advisories/22344
http://secunia.com/advisories/22353
http://secunia.com/advisories/22472
http://wcm.asbrusoft.com/page.php/id=791
http://www.securityfocus.com/bid/20544
http://www.vupen.com/english/advisories/2006/4004
http://www.vupen.com/english/advisories/2006/4060
http://www.vupen.com/english/advisories/2006/4061
http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0306.html
http://editor.asbrusoft.com/page.php/id=727

Get alerted when CVE-2006-5258 or the next vulnerability affects your stack