Summaryinfo

A vulnerability was found in TYPO3 6.1.7. It has been classified as problematic. Impacted is an unknown function of the file tce_file.php. The manipulation of the argument file[editfile][0][data] leads to cross site scripting. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

Detailsinfo

A vulnerability was found in TYPO3 6.1.7 (Content Management System) and classified as problematic. This issue affects an unknown code block of the file tce_file.php. The manipulation of the argument file[editfile][0][data] with an unknown input leads to a cross site scripting vulnerability. Using CWE to declare the problem leads to CWE-80. The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages. Impacted is integrity.

The weakness was shared 02/24/2014 by HauntIT with HauntIT Blog as Multiple vulnerabilities in Typo3 CMS as not defined exploit (Packetstorm). It is possible to read the advisory at packetstormsecurity.com. The vendor was not involved in the public release. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. It demands that the victim is doing some kind of user interaction. Technical details as well as a public exploit are known. The attack technique deployed by this issue is T1059.007 according to MITRE ATT&CK.

A public exploit has been developed in URL/Javascript and been published immediately after the advisory. The exploit is available at packetstormsecurity.com. It is declared as highly functional. By approaching the search of inurl:tce_file.php it is possible to find vulnerable targets with Google Hacking.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the databases at X-Force (91531) and SecurityFocus (BID 65763†). The entries VDB-12475, VDB-12476, VDB-12477 and VDB-12478 are related to this item. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Content Management System

Name

• TYPO3

Version

• 6.1.7

License

• open-source

Website

• Product: https://typo3.org/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion