Directory Traversal Vulnerabilities in FCKeditor by eEnhanced
CVE-2009-2265
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 93%
What is CVE-2009-2265?
Multiple directory traversal vulnerabilities exist in FCKeditor prior to version 2.6.4.1, allowing remote attackers to exploit these weaknesses to create executable files in arbitrary directories. This is accomplished through specially crafted input targeting unspecified connector modules. The vulnerabilities have been observed in real-world attacks, particularly impacting the integrated file browser and file manager connectors, leading to potential remote code execution.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.