Lucene search
+L

6 matches found

OpenVAS
OpenVAS
•added 2014/01/09 12:00 a.m.•57 views

TYPO3 userUid Command Execution Vulnerability

TYPO3 is prone to a command execution vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3"; ifdescription...

7.5CVSS6.9AI score0.06326EPSS
SaveExploits2References2
CVE
CVE
•added 2006/12/21 9:00 p.m.•68 views

CVE-2006-6690

CVE-2006-6690 affects TYPO3 with the rtehtmlarea extension (Typo3 4.0.0–4.0.3, 3.7–3.8, and 4.1 beta). The issue allows remote command execution via shell metacharacters in the userUid parameter to rtehtmlarea/htmlarea/plugins/SpellChecker/spell-check-logic.php (reported as a vulnerability enabli...

7.5CVSS7.4AI score0.06326EPSS
SaveExploits2References11Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/12/21 12:00 a.m.•5 views

CVE-2006-6690: Undefined Security Weakness

rtehtmlarea/pi1/class.txrtehtmlareapi1.php in Typo3 4.0.0 through 4.0.3, 3.7 and 3.8 with the rtehtmlarea extension, and 4.1 beta allows remote authenticated users to execute arbitrary commands via shell metacharacters in the userUid parameter to...

7.5CVSS6.3AI score0.06326EPSS
SaveExploits2References1
Exploit DB
Exploit DB
•added 2006/12/20 12:00 a.m.•47 views

Typo3 3.7/3.8/4.0 - 'Class.TX_RTEHTMLArea_PI1.php' Multiple Remote Command Execution Vulnerabilities

source: https://www.securityfocus.com/bid/21680/info TYPO3 is prone to multiple vulnerabilities that allow attackers to execute arbitrary commands. This issue occurs because the application fails to properly sanitize user-supplied data. Exploiting these issues allows unauthenticated attackers to...

7.5CVSS5.8AI score0.06326EPSS
SaveExploits2
Typo3
Typo3
•added 2006/12/20 12:00 a.m.•23 views

Remote Command Execution

A critical problem has been discovered in plugin class.txrtehtmlareapi1.php that is used for spell-checking in the rtehtmlarea extension. Component Type: System Extension TYPO3 Versions 4.0-4.0.3, 4.1beta Third Party Extension TYPO3 Versions up to 3.8.1. Since TYPO3 Version 4.0 the extension is...

7.5AI score
SaveExploits0Affected Software2
securityvulns
securityvulns
•added 2006/12/20 12:00 a.m.•48 views

[Full-disclosure] SEC Consult SA-20061220-0 :: Typo3 Command Execution Vulnerability

SEC-CONSULT Security Advisory 20061220-0 ======================================================================= title: Remote Command Execution in Typo3 program: Typo3 Content Management System vulnerable version: 4.0.0 - 4.0.3 3.7 and 3.8 with rtehtmlarea extension 4.1beta impact: critical...

0.6AI score
SaveExploits0
Rows per page
Query Builder