What’s Vulnerable › Vulnerabilities

CVE-2010-3156

• Severity: medium (CVSS 6.9 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2010-10-25 · updated 2026-06-16

Description

Untrusted search path vulnerability in K2 K2Editor before 1.5.9 allows local users to gain privileges via a Trojan horse executable file in the current working directory.

Affected products

• K2Top K2Editor: through 1.5.8

References

• http://jvn.jp/en/jp/JVN36921800/index.html
• http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000041.html
• http://jvn.jp/en/jp/JVN36921800/index.html
• http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000041.html

Get alerted when CVE-2010-3156 or the next vulnerability affects your stack