CVE-2010-3165

Severity: medium (CVSS 6.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-10-25 · updated 2026-06-16

Description

Untrusted search path vulnerability in Yokka NoEditor 1.33.1.1 and earlier, OuiEditor 1.6.1.1 and earlier, UnEditor 1.10.1.2 and earlier, DeuxEditor 1.7.1.2 and earlier, SQLEditorXP 3.14.1.2 and earlier, SQLEditorTE 1.9.1.3 and earlier, SQLEditor8 3.8.1.2 and earlier, and SQLEditorClassic 1.8.1.3 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory.

Affected products

Yokkasoft Deuxeditor: through 1.7.1.2
Yokkasoft Noeditor: through 1.33.1.1
Yokkasoft Ouieditor: through 1.6.1.1
Yokkasoft Sqleditor8: through 3.8.1.2
Yokkasoft Sqleditorclassic: through 1.8.1.3
Yokkasoft Sqleditorte: through 1.9.1.3
Yokkasoft Sqleditorxp: through 3.14.1.2
Yokkasoft Uneditor: through 1.10.1.2

References

Get alerted when CVE-2010-3165 or the next vulnerability affects your stack