'

漏洞组件 — FCKeditor

漏洞详情：
FCKeditor是一个专门使用在网页上属于开放源代码的所见即所得文字编辑器。它志于轻量化，不需要太复杂的安装步骤即可使用。它可和PHP、 JavaScript、ASP、ASP.NET、ColdFusion、Java、以及ABAP等不同的编程语言相结合。“FCKeditor”名称中的 “FCK” 是这个编辑器的作者的名字Frederico Caldeira Knabben的缩写。FCKeditor 相容于绝大部分的网页浏览器，像是 : Internet Explorer 5.5+ (Windows)、Mozilla Firefox 1.0+、Mozilla 1.3+ 和 Netscape 7+。在未来的版本也将会加入对 Opera 的支援。

相关漏洞

SSV ID 漏洞名称
SSV-92521 FCKEditor Core - (Editor 'spellchecker.php') Cross-Site Scripting
SSV-90176 FCKeditor /spellchecker.php 页面绝对路径泄露
SSV-90142 FCKeditor JSP版本 connector模块文件上传漏洞
SSV-90136 FCKeditor 2.4.3 /fckeditor/editor/filemanager/upload/php/upload.php 文件上传漏洞
SSV-89450 网站通 CMS FCKeditor 组件文件上传漏洞
SSV-89361 FCKEditor 2.6.8 /editor/filemanager/connectors/asp/commands.asp 文件上传漏洞
SSV-89358 FCKeditor 2.6.8 /editor/filemanager/connectors/asp/commands.asp 文件上传
SSV-76790 FCKEditor ASP 2.6.8 - File Upload Protection Bypass
SSV-62344 FCKeditor 2.4.3 /fckeditor/editor/filemanager/upload/asp/class_upload.asp 文件上传漏洞
SSV-62346 FCKeditor 2.4.3 /fckeditor/editor/filemanager/browser/default/connectors/php/commands.php 文件上传漏洞
SSV-62345 FCKeditor 2.4.3 /fckeditor/editor/filemanager/browser/default/connectors/asp/class_upload.asp 文件上传漏洞
SSV-62347 FCKeditor 2.6.4 /fckeditor/editor/filemanager/browser/default/connectors/php/io.php 文件上传漏洞
SSV-60488 FCKEditor 'FileUpload()'函数任意文件上传漏洞
SSV-88195 fckeditor 2.2 upload.php PHP环境下任意文件上传漏洞
SSV-62283 fckeditor 2.4.3 upload.php PHP环境下任意文件上传漏洞
SSV-20830 FCKeditor all versian Arbitrary File Upload Vulnerability
SSV-11823 FCKeditor.Java本地拒绝服务漏洞
SSV-11759 FCKeditor connectors模块多个跨站脚本及目录遍历漏洞
SSV-4808 FCKeditor connector.php任意文件上传漏洞
SSV-2641 Fckeditor <=2.4.2 For php 任意上传文件漏洞
SSV-1897 FCKeditor可选择数据流任意文件上传漏洞
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English