Skip to content
OpenAdvisories
Unscored DSA-1836-1 2 CVEs

fckeditor - arbitrary code execution

Published Jul 16, 2009 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 fckeditor 1:2.6.2-1lenny1

Vulnerabilities 2

  • Unscored —
    CVE-2009-2265 Public exploit EPSS 84%

    Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable fi…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to inject arbitr…