![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
Test ID: | 1.3.6.1.4.1.25623.1.0.804205 |
Category: | Web application abuses |
Title: | TYPO3 File Abstraction Layer Multiple Vulnerabilities |
Summary: | TYPO3 is prone to multiple vulnerabilities. |
Description: | Summary: TYPO3 is prone to multiple vulnerabilities. Vulnerability Insight: An error exists in the File Abstraction Layer, which implements partial permissions for copying, deleting, and moving files and it does not properly handle denied file extension names that contain special characters. Vulnerability Impact: Successful exploitation will allow remote attackers to execute arbitrary code or read sensitive information. Affected Software/OS: TYPO3 version 6.0.0 to 6.0.8, 6.1.0 to 6.1.3 Solution: Upgrade to TYPO3 version 6.0.9, 6.1.4 or later. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P |
Cross-Ref: |
Common Vulnerability Exposure (CVE) ID: CVE-2013-4320 Common Vulnerability Exposure (CVE) ID: CVE-2013-4321 |
Copyright | Copyright (C) 2014 Greenbone AG |
This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |