Lucene search
+L

CVE-2008-6178

🗓️ 19 Feb 2009 16:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 96 Views🌐 WEB

Unrestricted file upload vulnerability in FCKeditor 2.2 allows remote attackers to execute arbitrary code

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
circl
Circl
CVE-2008-6178
18 Oct 200800:00
–circl
checkpoint_advisories
Check Point Advisories
Adobe ColdFusion FCKeditor Input Validation Flaw Arbitrary File Upload (CVE-2008-6178; CVE-2009-2265)
17 Nov 201400:00
–checkpoint_advisories
cvelist
Cvelist
CVE-2008-6178
19 Feb 200916:00
–cvelist
exploitdb
Exploit DB
Nuke ET 3.4 - 'FCKeditor' Arbitrary File Upload
18 Oct 200800:00
–exploitdb
exploitdb
Exploit DB
Falt4 CMS RC4 - 'FCKeditor' Arbitrary File Upload
16 Feb 200900:00
–exploitdb
euvd
EUVD
EUVD-2008-6148
7 Oct 202500:30
–euvd
nvd
NVD
CVE-2008-6178
19 Feb 200916:30
–nvd
prion
Prion
Unrestricted file upload
19 Feb 200916:30
–prion
rapid7
Rapid7 Vulnerability Database (full)
CVE-2008-6178: Improper Control of Generation of Code
19 Feb 200900:00
–rapid7
seebug
seebug.org
FCKeditor connector.php任意文件上传漏洞
20 Feb 200900:00
–seebug
Rows per page
NVD
Node
OR
fckeditorfckeditorMatch2.3beta
phplistphplistMatch2.10.1
phplistphplistMatch2.10.2
phplistphplistMatch2.10.3
phplistphplistMatch2.10.4
phplistphplistMatch2.10.5
phplistphplistMatch2.10.6
ParameterPositionPathDescriptionCWE
NewFilerequest bodyFCKeditor/editor/filemanager/browser/default/connectors/php/connector.phpUnrestricted file upload vulnerability in FCKeditor connector.php allowing upload of PHP code via a crafted file; MIME type check can be spoofed.CWE-94
NewFilerequest bodymodules/newsletter/FCKeditor/editor/filemanager/browser/default/connectors/php/connector.phpUnrestricted file upload vulnerability in FCKeditor connector.php used in Falt4/Nuke ET; same MIME-type spoofing weakness.CWE-94

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 23:01Current
7.9High risk
Vulners AI Score7.9
CVSS 27.5
EPSS0.07811
96