Lucene search
PRIOn knowledge basePRION:CVE-2013-4250HistoryMay 20, 2014 - 2:55 p.m.
Design/Logic Flaw
2014-05-2014:55:00
PRIOn knowledge base
www.prio-n.com
4
The (1) file upload component and (2) File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.8 and 6.1.x before 6.1.3 do not properly check file extensions, which allow remote authenticated editors to execute arbitrary PHP code by uploading a .php file.
Related
cvelist
cvelist
CVE-2013-4250
2014-05-20 14:00:00
CVE-2013-4321
2014-05-20 14:00:00
nvd
nvd
CVE-2013-4250
2014-05-20 14:55:04
CVE-2013-4321
2014-05-20 14:55:04
cve
cve
CVE-2013-4250
2014-05-20 14:55:04
CVE-2013-4321
2014-05-20 14:55:04
ubuntucve
ubuntucve
CVE-2013-4250
2014-05-20 00:00:00
openvas
openvas
TYPO3 File Abstraction Code Execution Vulnerability
2014-01-06 00:00:00
prion
prion
Design/Logic Flaw
2014-05-20 14:55:00
typo3
typo3
Cross-Site Scripting and Remote Code Execution Vulnerability in TYPO3 Core
2013-07-30 00:00:00