CVEvulnerability

CVE-2010-3165

6.9 MEDIUM Published 2010-10-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-10-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C

Description

Untrusted search path vulnerability in Yokka NoEditor 1.33.1.1 and earlier, OuiEditor 1.6.1.1 and earlier, UnEditor 1.10.1.2 and earlier, DeuxEditor 1.7.1.2 and earlier, SQLEditorXP 3.14.1.2 and earlier, SQLEditorTE 1.9.1.3 and earlier, SQLEditor8 3.8.1.2 and earlier, and SQLEditorClassic 1.8.1.3 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory.

Affected configurations

• yokkasoft deuxeditor (<= 1.7.1.2) • yokkasoft noeditor (<= 1.33.1.1) • yokkasoft ouieditor (<= 1.6.1.1) • yokkasoft sqleditor8 (<= 3.8.1.2) • yokkasoft sqleditorclassic (<= 1.8.1.3) • yokkasoft sqleditorte (<= 1.9.1.3) • yokkasoft sqleditorxp (<= 3.14.1.2) • yokkasoft uneditor (<= 1.10.1.2)

References