Path Traversal in Fckeditor
CVE-2009-2265
Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable files in arbitrary directories via directory traversal sequences in the input to unspecified connector modules, as exploit…
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.839 (99.7th percentile) — read the EPSS interpretation.
Affected products
- Fckeditor — versions 2.0, 2.0_fc, 2.0_rc2
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (Patch, x_refsource_MISC)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)
- cve@mitre.org (vendor-advisory, x_refsource_FEDORA)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (mailing-list, x_refsource_MLIST)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
Frequently asked questions
- What is CVE-2009-2265?
- CVE-2009-2265 is a vulnerability in Fckeditor, classified under Path Traversal. Published 2009-07-05.
- Is CVE-2009-2265 known to be exploited?
- 34 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.