CVE-2012-4000 Cross-site scripting (XSS) vulnerability in the print_textinputs_var function in editor/dialog/fck_spellerpages/spellerpages/server-scripts/spellchecker.php in FCKeditor 2.6.7 and earlier allows remot...
MediumCVSS 4.3
EPSS 4.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the print_textinputs_var function in editor/dialog/fck_spellerpages/spellerpages/server-scripts/spellchecker.php in FCKeditor 2.6.7 and earlier allows remote attackers to inject arbitrary web script or HTML via textinputs array parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ckeditor fckeditor | <= 2.6.7 | No fix listed |
| ckeditor fckeditor | = 0.8-beta | No fix listed |
| ckeditor fckeditor | = 0.8.5-beta | No fix listed |
| ckeditor fckeditor | = 0.9.0-beta | No fix listed |
| ckeditor fckeditor | = 0.9.1-beta | No fix listed |
| ckeditor fckeditor | = 0.9.2-beta | No fix listed |
| ckeditor fckeditor | = 0.9.3-beta | No fix listed |
| ckeditor fckeditor | = 0.9.4-beta | No fix listed |
| ckeditor fckeditor | = 0.9.5-beta | No fix listed |
| ckeditor fckeditor | = 1.0 | No fix listed |
| ckeditor fckeditor | = 1.0-fc | No fix listed |
| ckeditor fckeditor | = 1.0-rc1 | No fix listed |
| ckeditor fckeditor | = 1.1 | No fix listed |
| ckeditor fckeditor | = 1.2 | No fix listed |
| ckeditor fckeditor | = 1.2.2 | No fix listed |
| ckeditor fckeditor | = 1.2.4 | No fix listed |
| ckeditor fckeditor | = 1.3 | No fix listed |
| ckeditor fckeditor | = 1.3.1 | No fix listed |
| ckeditor fckeditor | = 1.4 | No fix listed |
| ckeditor fckeditor | = 1.5 | No fix listed |
| ckeditor fckeditor | = 1.6 | No fix listed |
| ckeditor fckeditor | = 2.0 | No fix listed |
| ckeditor fckeditor | = 2.0-beta1 | No fix listed |
| ckeditor fckeditor | = 2.0-beta2 | No fix listed |
| ckeditor fckeditor | = 2.0-fc | No fix listed |
Show 28 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ckeditor fckeditor | = 2.0-rc1 | No fix listed |
| ckeditor fckeditor | = 2.0-rc2 | No fix listed |
| ckeditor fckeditor | = 2.0-rc3 | No fix listed |
| ckeditor fckeditor | = 2.1 | No fix listed |
| ckeditor fckeditor | = 2.1.1 | No fix listed |
| ckeditor fckeditor | = 2.2 | No fix listed |
| ckeditor fckeditor | = 2.3 | No fix listed |
| ckeditor fckeditor | = 2.3-beta | No fix listed |
| ckeditor fckeditor | = 2.3.1 | No fix listed |
| ckeditor fckeditor | = 2.3.2 | No fix listed |
| ckeditor fckeditor | = 2.3.3 | No fix listed |
| ckeditor fckeditor | = 2.4 | No fix listed |
| ckeditor fckeditor | = 2.4.1 | No fix listed |
| ckeditor fckeditor | = 2.4.2 | No fix listed |
| ckeditor fckeditor | = 2.4.3 | No fix listed |
| ckeditor fckeditor | = 2.5 | No fix listed |
| ckeditor fckeditor | = 2.5-beta | No fix listed |
| ckeditor fckeditor | = 2.5.1 | No fix listed |
| ckeditor fckeditor | = 2.6-beta | No fix listed |
| ckeditor fckeditor | = 2.6-rc | No fix listed |
| ckeditor fckeditor | = 2.6.1 | No fix listed |
| ckeditor fckeditor | = 2.6.2 | No fix listed |
| ckeditor fckeditor | = 2.6.3 | No fix listed |
| ckeditor fckeditor | = 2.6.3-beta | No fix listed |
| ckeditor fckeditor | = 2.6.4 | No fix listed |
| ckeditor fckeditor | = 2.6.4-beta | No fix listed |
| ckeditor fckeditor | = 2.6.4.1 | No fix listed |
| ckeditor fckeditor | = 2.6.5 | No fix listed |
References
- disse.cting.org exploit
- 49606 third-party-advisory vendor-advisory
- DSA-2522 vendor-advisory
- 54188 exploit vdb-entry
- fckeditor-spellchecker-xss(76604) vdb-entry