CVE-2009-4875

FCKeditor.Java 2.4 allows remote attackers to cause a denial of service infinite loop via a malformed request parameter that contains "ctrl" characters...

CVE-2009-4875

FCKeditor.Java 2.4 allows remote attackers to cause a denial of service infinite loop via a malformed request parameter that contains "ctrl" characters...

CVE-2009-4875: Undefined Security Weakness

FCKeditor.Java 2.4 allows remote attackers to cause a denial of service infinite loop via a malformed request parameter that contains "ctrl" characters...

FCKeditor.Java Connector Servlet 'CurrentFolder' Infinite Loop DoS

The remote web server is hosting a web application that uses FCKeditor.Java, which is used to run FCKeditor in a Java environment. Input to the 'CurrentFolder' parameter of the connector servlet is not sanitized properly. It is possible to create a specially crafted request that could put the web...

FCKeditor.Java本地拒绝服务漏洞

Bugraq ID: 35709 CNCAN ID：CNCAN-2009071702 FCKeditor.Java是一款FCKeditor 编辑器和Java之间的集成包，通过FCKeditor.Java可以在Java 程序中处理FCKeditor编辑器中的文件上传、浏览等需要服务器端支持的功能。 FCKeditor.Java不正确处理请求参数，远程攻击者可以利用漏洞使应用程序崩溃。 提交ctrl字符作为请求参会苏可导致tomcat一直应答请求，导致拒绝服务攻击。 FCKeditor.Java 2.4 升级到最新程序： FCKeditor FCKeditor.Java 2.4...