medium4.3
CVE-2009-2324
Multiple cross-site scripting (XSS) vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to inject arbitrary web script or HTML via components in…
Impact
Multiple cross-site scripting (XSS) vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to inject arbitrary web script or HTML via components in the samples (aka _samples) directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fckeditor | Fckeditor | through 2.6.4 Versions 2.0, 2.0_fc, 2.0_rc2, 2.0rc2, 2.0rc3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.ocert.org/advisories/ocert-2009-007.html
- http://www.securityfocus.com/archive/1/504721/100/0/threaded
- http://www.securitytracker.com/id?1022513
- http://www.ocert.org/advisories/ocert-2009-007.html
- http://www.securityfocus.com/archive/1/504721/100/0/threaded
- http://www.securitytracker.com/id?1022513