Directory traversal

2009-07-0516:30:00

PRIOn knowledge base

www.prio-n.com

8.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.973 High

EPSS

Percentile

99.8%

JSON

Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable files in arbitrary directories via directory traversal sequences in the input to unspecified connector modules, as exploited in the wild for remote code execution in July 2009, related to the file browser and the editor/filemanager/connectors/ directory.

CPENameOperatorVersion
fckeditoreq2.4
fckeditoreq2.6.3 beta
fckeditoreq2.6.3
fckeditorle2.6.4
fckeditoreq2.6
fckeditoreq2.4.3
fckeditoreq2.5
fckeditoreq2.3 beta
fckeditoreq2.3.3
fckeditoreq2.5 beta

Name	Operator	Version
fckeditor	eq	2.4
fckeditor	eq	2.6.3 beta
fckeditor	eq	2.6.3
fckeditor	le	2.6.4
fckeditor	eq	2.6
fckeditor	eq	2.4.3
fckeditor	eq	2.5
fckeditor	eq	2.3 beta
fckeditor	eq	2.3.3
fckeditor	eq	2.5 beta