Search CVE reports
31 – 34 of 34 results
CVE-2009-2324
Low prioritySome fixes available 1 of 4
Multiple cross-site scripting (XSS) vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to inject arbitrary web script or HTML via components in the samples (aka _samples) directory.
2 affected packages
fckeditor, moin
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
fckeditor | — | — | — | — | — |
moin | — | — | — | — | — |
CVE-2009-2265
Low prioritySome fixes available 1 of 3
Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable files in arbitrary directories via directory traversal sequences in the input to unspecified connector modules,...
2 affected packages
fckeditor, moin
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
fckeditor | — | — | — | — | — |
moin | — | — | — | — | — |
CVE-2008-6178
Medium priorityUnrestricted file upload vulnerability in editor/filemanager/browser/default/connectors/php/connector.php in FCKeditor 2.2, as used in Falt4 CMS, Nuke ET, and other products, allows remote attackers to execute arbitrary code by...
1 affected package
fckeditor
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
fckeditor | — | — | — | — | — |
CVE-2008-3568
Medium priorityAbsolute path traversal vulnerability in fckeditor/editor/filemanager/browser/default/connectors/php/connector.php in UNAK-CMS 1.5.5 allows remote attackers to include and execute arbitrary local files via a full pathname in the...
1 affected package
fckeditor
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
fckeditor | — | — | — | — | — |