Vulnerability in N/a
CVE-2009-2265
Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable files in arbitrary directories via directory traversal sequences in the input to unspecified connector modules, as exploit…
EPSS: 0.923 (99.7th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- ADV-2009-1825 (vdb-entry, x_refsource_VUPEN)
- www.ocert.org/advisories/ocert-2009-007.html (x_refsource_MISC)
- sourceforge.net/project/shownotes.php (x_refsource_CONFIRM)
- 35909 (x_refsource_SECUNIA, third-party-advisory)
- DSA-1836 (vendor-advisory, x_refsource_DEBIAN)
- FEDORA-2009-7761 (x_refsource_FEDORA, vendor-advisory)
- 35833 (x_refsource_SECUNIA, third-party-advisory)
- ADV-2009-1813 (vdb-entry, x_refsource_VUPEN)
- [Zope-dev] 20090706 zope.html with FCKEditor security fix (mailing-list, x_refsource_MLIST)
- 1022513 (vdb-entry, x_refsource_SECTRACK)
Frequently asked questions
- What is CVE-2009-2265?
- CVE-2009-2265 is a vulnerability in N/a. Published 2009-07-05.
- Is CVE-2009-2265 known to be exploited?
- 34 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.