FC
Product
Fckeditor
8
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Fckeditor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-2324 | – | Jul 5 | Multiple cross-site scripting (XSS) vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to inject arbitrary web script or HTML via components in the samples (aka… Affected: through 2.6.4; 2.0; 2.0_fc; 2.0_rc2; 2.0rc2; 2.0rc3; +21 more |
| CVE-2009-2265 | – | Jul 5 | Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable files in arbitrary directories via directory traversal… Affected: through 2.6.4; 2.0; 2.0_fc; 2.0_rc2; 2.0rc2; 2.0rc3; +21 more |
| CVE-2008-6178 | – | Feb 19 | Unrestricted file upload vulnerability in editor/filemanager/browser/default/connectors/php/connector.php in FCKeditor 2.2, as used in Falt4 CMS, Nuke ET, and other products,… Affected: 2.0rc2; 2.0rc3; 2.2; 2.3beta; 2.4.3 |
| CVE-2006-6978 | – | Feb 8 | Cross-site scripting (XSS) vulnerability in the "Basic Toolbar Selection" in FCKEditor allows remote attackers to execute arbitrary JavaScript via the javascript: URI in the (1)… Affected: All versions, or not specified |
| CVE-2006-2529 | – | May 22 | editor/filemanager/upload/php/upload.php in FCKeditor before 2.3 Beta, when the upload feature is enabled, does not verify the Type parameter, which allows remote attackers to… Affected: 2.2 |
| CVE-2006-0921 | – | Feb 28 | Multiple directory traversal vulnerabilities in connector.php in FCKeditor 2.0 FC, as used in products such as RunCMS, allow remote attackers to list and create arbitrary… Affected: 2.0_fc |
| CVE-2006-0658 | – | Feb 13 | Incomplete blacklist vulnerability in connector.php in FCKeditor 2.0 and 2.2, as used in products such as RunCMS, allows remote attackers to upload and execute arbitrary script… Affected: 2.0; 2.2 |
| CVE-2005-0613 | – | Feb 28 | Unknown vulnerability in FCKeditor 2.0 RC2, when used with PHP-Nuke, allows remote attackers to upload arbitrary files Affected: 2.0_rc2 |
Showing 8