Test ID:	1.3.6.1.4.1.25623.1.0.803988
Category:	Web application abuses
Title:	TYPO3 Multiple Vulnerabilities (Jan 2009)
Summary:	TYPO3 is prone to multiple vulnerabilities.
Description:	Summary: TYPO3 is prone to multiple vulnerabilities. Vulnerability Insight: Multiple errors exist in the application: - An error exists in Indexed Search Engine system extension which fails to validate user-supplied input properly. - An error exists in session tokens, which is caused by the improper validation. - An error exists in Workspace module which fails to validate user-supplied input properly. Vulnerability Impact: Successful exploitation will allow remote attackers to execute arbitrary code or steal the victim's cookie-based authentication credentials. Affected Software/OS: TYPO3 versions 4.0.0 to 4.0.9, 4.1.0 to 4.1.7, 4.2.0 to 4.2.3 Solution: Upgrade to TYPO3 version 4.0.10, 4.1.8, 4.2.4 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0255 BugTraq ID: 33376 http://www.securityfocus.com/bid/33376 Debian Security Information: DSA-1711 (Google Search) http://www.debian.org/security/2009/dsa-1711 http://secunia.com/advisories/33617 http://secunia.com/advisories/33679 XForce ISS Database: typo3-installtool-weak-security(48132) https://exchange.xforce.ibmcloud.com/vulnerabilities/48132 Common Vulnerability Exposure (CVE) ID: CVE-2009-0256 XForce ISS Database: typo3-library-session-hijacking(48133) https://exchange.xforce.ibmcloud.com/vulnerabilities/48133 Common Vulnerability Exposure (CVE) ID: CVE-2009-0257 XForce ISS Database: typo3-adodb-xss(48137) https://exchange.xforce.ibmcloud.com/vulnerabilities/48137 XForce ISS Database: typo3-indexedsearchengine-xss(48135) https://exchange.xforce.ibmcloud.com/vulnerabilities/48135 XForce ISS Database: typo3-workspace-xss(48136) https://exchange.xforce.ibmcloud.com/vulnerabilities/48136 Common Vulnerability Exposure (CVE) ID: CVE-2009-0258 http://www.openwall.com/lists/oss-security/2009/01/23/4 XForce ISS Database: typo3-indexedsearch-command-execution(48138) https://exchange.xforce.ibmcloud.com/vulnerabilities/48138
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.