Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.804205
Category:Web application abuses
Title:TYPO3 File Abstraction Layer Multiple Vulnerabilities
Summary:TYPO3 is prone to multiple vulnerabilities.
Description:Summary:
TYPO3 is prone to multiple vulnerabilities.

Vulnerability Insight:
An error exists in the File Abstraction Layer, which implements partial
permissions for copying, deleting, and moving files and it does not properly
handle denied file extension names that contain special characters.

Vulnerability Impact:
Successful exploitation will allow remote attackers to execute arbitrary code
or read sensitive information.

Affected Software/OS:
TYPO3 version 6.0.0 to 6.0.8, 6.1.0 to 6.1.3

Solution:
Upgrade to TYPO3 version 6.0.9, 6.1.4 or later.

CVSS Score:
6.5

CVSS Vector:
AV:N/AC:L/Au:S/C:P/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2013-4320
Common Vulnerability Exposure (CVE) ID: CVE-2013-4321
CopyrightCopyright (C) 2014 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.