Approved changes feed: RSS · Atom

cpe:2.3:a:fckeditor:fckeditor:2.0_fc:*:*:*:*:*:*:*

part: a version: 2.0_fc update: *

VendorFckeditor (af64c4c8-29ee-5822-aa43-b47ee1776f20)
ProductFckeditor (ce040ea6-65b5-524e-bddb-1211965b4b49)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:sourceforge/fckeditor purl2cpe 2026-06-01 10:16:07.328317

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-2324 vulnerable 2026-06-08 04:51:27.781589 Details available
Multiple cross-site scripting (XSS) vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to inject arbitrary web script or HTML via components in the samples (aka _samples) directory.
Published: 2009-07-05T16:00:00.000Z
Updated: 2024-08-07T05:44:55.934Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2265 vulnerable 2026-06-08 04:51:27.401718 Details available
Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable files in arbitrary directories via directory traversal sequences in the input to unspecified connector modules, as exploited in the wild for remote code execution in July 2009, related to the file browser and the editor/filemanager/connectors/ directory.
Published: 2009-07-05T16:00:00.000Z
Updated: 2024-08-07T05:44:55.927Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0921 vulnerable 2026-06-08 04:48:55.791661 Details available
Multiple directory traversal vulnerabilities in connector.php in FCKeditor 2.0 FC, as used in products such as RunCMS, allow remote attackers to list and create arbitrary directories via a .. (dot dot) in the CurrentFolder parameter to (1) GetFoldersAndFiles and (2) CreateFolder.
Published: 2006-02-28T11:00:00.000Z
Updated: 2024-08-07T16:56:13.930Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.