CVE-2015-4607 in Frontend User Upload Extension

Resumen (Inglés)

Unrestricted file upload vulnerability in the Frontend User Upload (feupload) extension 0.5.0 and earlier for TYPO3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension using a frontend form, then accessing it via a direct request to the file in the fileadmin folder.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

2015-06-16

Divulgación

2015-06-16

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
75959	Frontend User Upload Extension File Upload escalada de privilegios	434	No está definido	No está definido	CVE-2015-4607

Fuentes

• MITRE
• NVD
• CVE Details