CVE-2015-4607 in Frontend User Upload Extension
要約 (英語)
Unrestricted file upload vulnerability in the Frontend User Upload (feupload) extension 0.5.0 and earlier for TYPO3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension using a frontend form, then accessing it via a direct request to the file in the fileadmin folder.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
予約する
2015年06月16日
公開
2015年06月16日
ステータス
確認済み
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 75959 | Frontend User Upload Extension File Upload 特権昇格 | 434 | 未定義 | 未定義 | CVE-2015-4607 |