CVE:CVE-2010-3165
CNNVD:CNNVD-201010-373
Yokka NoEditor 1.33.1.1及之前版本，OuiEditor 1.6.1.1及之前版本，UnEditor 1.10.1.2及之前版本，DeuxEditor 1.7.1.2及之前版本，SQLEditorXP 3.14.1.2及之前版本，SQLEditorTE 1.9.1.3及之前版本，SQLEditor8 3.8.1.2及之前版本和SQLEditorClassic及之前版本中存在非信任搜索路径漏洞。本地用户可以借助在当前工作目录中的Trojan木马可执行文件获得权限提升。
solution:Upgrade yokkasoft deuxeditor to a higher version than 1.7.1.2,and avoid the version (,1.7.1.2]; Upgrade yokkasoft noeditor to a higher version than 1.33.1.1,and avoid the version (,1.33.1.1]; Upgrade yokkasoft ouieditor to a higher version than 1.6.1.1,and avoid the version (,1.6.1.1]; Upgrade yokkasoft sqleditor8 to a higher version than 3.8.1.2,and avoid the version (,3.8.1.2]; Upgrade yokkasoft sqleditorclassic to a higher version than 1.8.1.3,and avoid the version (,1.8.1.3]; Upgrade yokkasoft sqleditorte to a higher version than 1.9.1.3,and avoid the version (,1.9.1.3]; Upgrade yokkasoft sqleditorxp to a higher version than 3.14.1.2,and avoid the version (,3.14.1.2]; Upgrade yokkasoft uneditor to a higher version than 1.10.1.2,and avoid the version (,1.10.1.2]