CVE-2010-3156

CVE-2010-3156 is an untrusted search path vulnerability affecting K2 K2Editor versions prior to 1.5.9. This flaw allows a local attacker to gain privileges by placing a malicious executable in the current working directory, which the application then executes. With a CVSS score of 6.9, it presents a high risk due to its potential for complete compromise of confidentiality, integrity, and availability, though it requires medium attack complexity and local access. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.