NVD

Id
49516  
Name
CVE-2009-2265  
Description
Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable files in arbitrary directories via directory traversal sequences in the input to unspecified connector modules, as exploited in the wild for remote code execution in July 2009, related to the file browser and the editor/filemanager/connectors/ directory.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-07-05  
Modified Date
2009-08-12  
Seq
2009-2265  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
250378 49516 CVE-2009-2265 http://isc.sans.org/diary.html?storyid=6724  View
250379 49516 CVE-2009-2265 [Zope-dev] 20090706 zope.html with FCKEditor security fix  View
250380 49516 CVE-2009-2265 http://sourceforge.net/project/shownotes.php?release_id=695430  View
250381 49516 CVE-2009-2265 DSA-1836  View
250382 49516 CVE-2009-2265 http://www.ocert.org/advisories/ocert-2009-007.html  View
250383 49516 CVE-2009-2265 20090703 [oCERT-2009-007] FCKeditor input sanitization errors  View
250384 49516 CVE-2009-2265 1022513  View
250385 49516 CVE-2009-2265 ADV-2009-1813  View
250386 49516 CVE-2009-2265 ADV-2009-1825  View
250387 49516 CVE-2009-2265 FEDORA-2009-7761  View
250388 49516 CVE-2009-2265 FEDORA-2009-7794  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40884 JVNDB-2009-001890 FCKEditor におけるディレクトリトラバーサルの脆弱性 Adobe ColdFusion で使用されている FCKEditor には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2009-2265 39696 CVE-2009-2265 49516 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001890.html 2009-07-05 2009-08-17 View