This host is installed with CKEditor and is prone to multiple vulnerabilities.

Successful exploitation will allow attacker to execute arbitrary HTML and script code in a user's browser session in context of an affected site and results in loss of confidentiality. Impact Level: Application

Update to CKEditor Version 4.0.1.1 or later For updates refer to http://ckeditor.com/download

Input passed via POST parameters to /ckeditor/samples/sample_posteddata.php is not properly sanitized before being returned to the user.

CKEditor Version 4.0.1

• http://ckeditor.com/release/CKEditor-4.0.1.1
• http://osvdb.org/90373
• http://packetstormsecurity.com/files/120387
• http://www.exploit-db.com/exploits/24530

---

Updated on 2015-03-25