Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5064
HistorySep 12, 2017 - 8:26 a.m.

Unauthorized File Upload

2017-09-1208:26:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

EPSS

0.008

Percentile

81.5%

typo3/cms is vulnerable to unauthorized file upload. The library does not restrict files with the pht extension, allowing a malicious user to upload a .pht file to the application and execute arbitrary PHP script.

EPSS

0.008

Percentile

81.5%