---
id: 8414
title: "Vulnerability Alert: FCKeditor Arbitrary File Upload"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/network-pentesting/vulnerability-alert-fckeditor-arbitrary-file-upload/"
published_at: "2009-12-09T00:00:00Z"
tags: ["web-security", "exploitation", "vulnerability", "file-upload", "webshell", "fckeditor"]
phying_url: "https://phying.com/item/8414"
lang: en
---

# Vulnerability Alert: FCKeditor Arbitrary File Upload

## Summary

The FCKeditor arbitrary file upload flaw lets attackers drop web shells and run commands with web server privileges. Exploited in the wild since 2009, it often slips past vulnerability scanners.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2009-12-09T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/network-pentesting/vulnerability-alert-fckeditor-arbitrary-file-upload/
- **Phying News:** https://phying.com/item/8414