FCKeditor 2.6.3

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:fckeditor:fckeditor:2.6.3:*:*:*:*:*:*:*

part: a version: 2.6.3 update: *

VendorFckeditor (af64c4c8-29ee-5822-aa43-b47ee1776f20)
ProductFckeditor (ce040ea6-65b5-524e-bddb-1211965b4b49)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:sourceforge/fckeditor purl2cpe 2026-06-01 10:16:07.336800

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-2324 vulnerable 2026-06-08 04:51:27.781972 Details available
Multiple cross-site scripting (XSS) vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to inject arbitrary web script or HTML via components in the samples (aka _samples) directory.
Published: 2009-07-05T16:00:00.000Z
Updated: 2024-08-07T05:44:55.934Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2265 vulnerable 2026-06-08 04:51:27.413576 Details available
Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable files in arbitrary directories via directory traversal sequences in the input to unspecified connector modules, as exploited in the wild for remote code execution in July 2009, related to the file browser and the editor/filemanager/connectors/ directory.
Published: 2009-07-05T16:00:00.000Z
Updated: 2024-08-07T05:44:55.927Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.