CVE-2006-0658

This exploit leverages an authentication bypass vulnerability in InoutMailingListManager <= 3.1 to upload a malicious PHP file, which then executes arbitrary commands on the target system. It also retrieves database credentials from the application's configuration file.

This exploit targets FCKEditor versions 2.0 to 2.2, allowing arbitrary file uploads via the PHP connector. It leverages misconfigurations in the `Config[DeniedExtensions][File]` array to upload a malicious shell, enabling remote command execution.