Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2013-4321

The File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.8 and 6.1.x before 6.1.4 allows remote authenticated editors to execute arbitrary PHP code via unspecified characters in the file extension when renaming a file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4250.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.1%
CVSS Severity
CVSS v2 Score 6.5
Products affected by CVE-2013-4321
  • Typo3 » Typo3 » Version: 6.0
    cpe:2.3:a:typo3:typo3:6.0
  • Typo3 » Typo3 » Version: 6.0.1
    cpe:2.3:a:typo3:typo3:6.0.1
  • Typo3 » Typo3 » Version: 6.0.2
    cpe:2.3:a:typo3:typo3:6.0.2
  • Typo3 » Typo3 » Version: 6.0.3
    cpe:2.3:a:typo3:typo3:6.0.3
  • Typo3 » Typo3 » Version: 6.0.4
    cpe:2.3:a:typo3:typo3:6.0.4
  • Typo3 » Typo3 » Version: 6.0.5
    cpe:2.3:a:typo3:typo3:6.0.5
  • Typo3 » Typo3 » Version: 6.0.6
    cpe:2.3:a:typo3:typo3:6.0.6
  • Typo3 » Typo3 » Version: 6.0.7
    cpe:2.3:a:typo3:typo3:6.0.7
  • Typo3 » Typo3 » Version: 6.1
    cpe:2.3:a:typo3:typo3:6.1
  • Typo3 » Typo3 » Version: 6.1.1
    cpe:2.3:a:typo3:typo3:6.1.1
  • Typo3 » Typo3 » Version: 6.1.2
    cpe:2.3:a:typo3:typo3:6.1.2
  • Typo3 » Typo3 » Version: 6.1.3
    cpe:2.3:a:typo3:typo3:6.1.3


Products
Pricing
Contact Us

Shodan ® - All rights reserved