CVE-2010-3165 Untrusted search path vulnerability in Yokka NoEditor 1.33.1.1 and earlier, OuiEditor 1.6.1.1 and earlier, UnEditor 1.10.1.2 and earlier, DeuxEditor 1.7.1.2 and earlier, SQLEditorXP 3.14.1.2 and earli...
MediumCVSS 6.9
EPSS 0.28%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in Yokka NoEditor 1.33.1.1 and earlier, OuiEditor 1.6.1.1 and earlier, UnEditor 1.10.1.2 and earlier, DeuxEditor 1.7.1.2 and earlier, SQLEditorXP 3.14.1.2 and earlier, SQLEditorTE 1.9.1.3 and earlier, SQLEditor8 3.8.1.2 and earlier, and SQLEditorClassic 1.8.1.3 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| yokkasoft deuxeditor | <= 1.7.1.2 | No fix listed |
| yokkasoft noeditor | <= 1.33.1.1 | No fix listed |
| yokkasoft ouieditor | <= 1.6.1.1 | No fix listed |
| yokkasoft sqleditor8 | <= 3.8.1.2 | No fix listed |
| yokkasoft sqleditorclassic | <= 1.8.1.3 | No fix listed |
| yokkasoft sqleditorte | <= 1.9.1.3 | No fix listed |
| yokkasoft sqleditorxp | <= 3.14.1.2 | No fix listed |
| yokkasoft uneditor | <= 1.10.1.2 | No fix listed |
References
- JVN#07497935 third-party-advisory
- JVNDB-2010-000049 third-party-advisory