Test ID:	1.3.6.1.4.1.25623.1.0.804210
Category:	Web application abuses
Title:	TYPO3 Multiple Vulnerabilities (TYPO3-CORE-SA-2011-001) - Active Check
Summary:	TYPO3 is prone to multiple vulnerabilities.
Description:	Summary: TYPO3 is prone to multiple vulnerabilities. Vulnerability Insight: The following flaws exist: - CVE-2011-4626: Cross-site Scripting (XSS) via the 'JSwindow' property of the typolink function - CVE-2011-4627: Information Disclosure on the backend - CVE-2011-4628: Authentication bypass in the backend through a crafted request - CVE-2011-4629: XSS via the admin panel - CVE-2011-4630: XSS via the browse_links wizard - CVE-2011-4631: XSS via the system extension recycler - CVE-2011-4632: XSS via the tcemain flash message - CVE-2011-4901: Arbitrary information extraction from the TYPO3 database - CVE-2011-4902: Arbitrary file deletion on the webserver - CVE-2011-4903: XSS via the RemoveXSS function Affected Software/OS: TYPO3 versions prior to 4.3.12, 4.4.x prior to 4.4.9 and 4.5.x prior to 4.5.4. Solution: Update to version 4.3.12, 4.4.9, 4.5.4 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-4626 https://security-tracker.debian.org/tracker/CVE-2011-4626 Common Vulnerability Exposure (CVE) ID: CVE-2011-4627 https://security-tracker.debian.org/tracker/CVE-2011-4627 Common Vulnerability Exposure (CVE) ID: CVE-2011-4628 https://security-tracker.debian.org/tracker/CVE-2011-4628 Common Vulnerability Exposure (CVE) ID: CVE-2011-4629 https://security-tracker.debian.org/tracker/CVE-2011-4629 Common Vulnerability Exposure (CVE) ID: CVE-2011-4630 https://security-tracker.debian.org/tracker/CVE-2011-4630 Common Vulnerability Exposure (CVE) ID: CVE-2011-4631 https://security-tracker.debian.org/tracker/CVE-2011-4631 Common Vulnerability Exposure (CVE) ID: CVE-2011-4632 https://security-tracker.debian.org/tracker/CVE-2011-4632 Common Vulnerability Exposure (CVE) ID: CVE-2011-4901 https://security-tracker.debian.org/tracker/CVE-2011-4901 Common Vulnerability Exposure (CVE) ID: CVE-2011-4902 https://security-tracker.debian.org/tracker/CVE-2011-4902 Common Vulnerability Exposure (CVE) ID: CVE-2011-4903 https://security-tracker.debian.org/tracker/CVE-2011-4903
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.