Published: 11/06/2014 Updated: 28/08/2015

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in editor/dialog/fck_spellerpages/spellerpages/server-scripts/spellchecker.php in FCKeditor prior to 2.6.11 and previous versions allows remote malicious users to inject arbitrary web script or HTML via an array key in the textinputs[] parameter, a different issue than CVE-2012-4000.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ckeditor fckeditor

Debian Bug report logs - #752873 fckeditor: CVE-2014-4037 Package: fckeditor; Maintainer for fckeditor is (unknown); Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Fri, 27 Jun 2014 10:03:02 UTC Severity: grave Tags: security Fixed in version 1:266-3+rm Done: Debian FTP Masters <ftpmaster@ftp-masterdebianor ...

CWE-79 http://ckeditor.com/blog/FCKeditor-2.6.11-Released http://packetstormsecurity.com/files/126902/FCKeditor-2.6.10-Cross-Site-Scripting.html http://www.securitytracker.com/id/1030413 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=752873 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2014-4037

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect