CVE-2009-2265

🗓️ 05 Jul 2009 16:30:00Reported by ubuntu.comType

Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable files in arbitrary directories via directory traversal sequences in the input to unspecified connector modules. Exploited in the wild for remote code execution in July 2009, related to the file browser and the editor/filemanager/connectors/ directory

Reporter	Title	Published	Views	Family All 50
0day.today	Adobe ColdFusion 8 - Remote Command Execution Exploit	25 Jun 202100:00	–	zdt
GithubExploit	Exploit for Path Traversal in Fckeditor	27 Sep 202521:46	–	githubexploit
GithubExploit	Exploit for Path Traversal in Fckeditor	12 Jan 202612:27	–	githubexploit
BDU FSTEC	The vulnerability of the WYSIWYG editor Ckeditor arises from incorrect restrictions on the path to the restricted catalog. This allows attackers to load arbitrary files.	6 Mar 202300:00	–	bdu_fstec
Circl	CVE-2009-2265	24 Nov 201000:00	–	circl
Tenable Nessus	Adobe ColdFusion FCKeditor 'CurrentFolder' File Upload	14 Jul 200900:00	–	nessus
Tenable Nessus	Debian DSA-1836-1 : fckeditor - missing input sanitising	24 Feb 201000:00	–	nessus
Tenable Nessus	FCKeditor 'CurrentFolder' Arbitrary File Upload	15 Jul 200900:00	–	nessus
Tenable Nessus	Fedora 10 : moin-1.6.4-3.fc10 (2009-7761)	20 Jul 200900:00	–	nessus
Tenable Nessus	Fedora 10 : wxGTK-2.8.10-2.fc10 / Fedora 11 : moin-1.8.4-2.fc11 (2009-7794)	20 Jul 200900:00	–	nessus