CVE-2014-6298

Unrestricted file upload vulnerability in the mmforum extension before 1.9.3 for TYPO3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors...

CVE-2014-6298

CVE-2014-6298 refers to an unrestricted file upload vulnerability in the TYPO3 extension mm_forum (versions 1.9.2 and below). The issue enables remote code execution when an attacker uploads a file with an executable extension and accesses it via unspecified vectors, due to insufficient input/fil...

Several vulnerabilities in extension mm_forum (mm_forum)

It has been discovered that the extension "mmforum" mmforum is vulnerable to Arbitrary Code Execution, Cross-Site Scripting and Cross-Site Request Forgery Release Date: February 12, 2014 Bulletin update: September 18, 2014 added CVEs Component Type: Third party extension. This extension is not a...