Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
[oCERT-2009-007] FCKeditor input sanitization errors Jul 03 2009 03:45PM
Andrea Barisani (lcars ocert org)

#2009-007 FCKeditor input sanitization errors

Description:

FCKeditor, a web based open source HTML text editor, suffers from a remote
file upload vulnerability.

The input of several connector modules is not properly verified before being
used, this leads to exposure of the contents of arbitrary ...

[ more ]  





 

Privacy Statement
Copyright 2009, SecurityFocus