GCVE - cpe:2.3:a:fckeditor:fckeditor:2.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:fckeditor:fckeditor:2.4:*:*:*:*:*:*:*

part: a version: 2.4 update: *

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
`pkg:sourceforge/fckeditor`	purl2cpe	2026-06-01 10:16:07.334635

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-2324`	vulnerable	2026-06-08 04:51:27.781799	Details available Multiple cross-site scripting (XSS) vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to inject arbitrary web script or HTML via components in the samples (aka _samples) directory. Published: 2009-07-05T16:00:00.000Z Updated: 2024-08-07T05:44:55.934Z Open on db.gcve.eu Reference links http://www.ocert.org/advisories/ocert-2009-007.html http://www.securitytracker.com/id?1022513 http://www.securityfocus.com/archive/1/504721/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2265`	vulnerable	2026-06-08 04:51:27.408243	Details available Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable files in arbitrary directories via directory traversal sequences in the input to unspecified connector modules, as exploited in the wild for remote code execution in July 2009, related to the file browser and the editor/filemanager/connectors/ directory. Published: 2009-07-05T16:00:00.000Z Updated: 2024-08-07T05:44:55.927Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2009/1825 http://www.ocert.org/advisories/ocert-2009-007.html http://sourceforge.net/project/shownotes.php?release_id=695430 http://secunia.com/advisories/35909 http://www.debian.org/security/2009/dsa-1836	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.