ID de Prueba:	1.3.6.1.4.1.25623.1.0.804210
Categoría:	Web application abuses
Título:	TYPO3 Multiple Vulnerabilities (TYPO3-CORE-SA-2011-001) - Active Check
Resumen:	TYPO3 is prone to multiple vulnerabilities.
Descripción:	Summary: TYPO3 is prone to multiple vulnerabilities. Vulnerability Insight: The following flaws exist: - CVE-2011-4626: Cross-site Scripting (XSS) via the 'JSwindow' property of the typolink function - CVE-2011-4627: Information Disclosure on the backend - CVE-2011-4628: Authentication bypass in the backend through a crafted request - CVE-2011-4629: XSS via the admin panel - CVE-2011-4630: XSS via the browse_links wizard - CVE-2011-4631: XSS via the system extension recycler - CVE-2011-4632: XSS via the tcemain flash message - CVE-2011-4901: Arbitrary information extraction from the TYPO3 database - CVE-2011-4902: Arbitrary file deletion on the webserver - CVE-2011-4903: XSS via the RemoveXSS function Affected Software/OS: TYPO3 versions prior to 4.3.12, 4.4.x prior to 4.4.9 and 4.5.x prior to 4.5.4. Solution: Update to version 4.3.12, 4.4.9, 4.5.4 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-4626 https://security-tracker.debian.org/tracker/CVE-2011-4626 Common Vulnerability Exposure (CVE) ID: CVE-2011-4627 https://security-tracker.debian.org/tracker/CVE-2011-4627 Common Vulnerability Exposure (CVE) ID: CVE-2011-4628 https://security-tracker.debian.org/tracker/CVE-2011-4628 Common Vulnerability Exposure (CVE) ID: CVE-2011-4629 https://security-tracker.debian.org/tracker/CVE-2011-4629 Common Vulnerability Exposure (CVE) ID: CVE-2011-4630 https://security-tracker.debian.org/tracker/CVE-2011-4630 Common Vulnerability Exposure (CVE) ID: CVE-2011-4631 https://security-tracker.debian.org/tracker/CVE-2011-4631 Common Vulnerability Exposure (CVE) ID: CVE-2011-4632 https://security-tracker.debian.org/tracker/CVE-2011-4632 Common Vulnerability Exposure (CVE) ID: CVE-2011-4901 https://security-tracker.debian.org/tracker/CVE-2011-4901 Common Vulnerability Exposure (CVE) ID: CVE-2011-4902 https://security-tracker.debian.org/tracker/CVE-2011-4902 Common Vulnerability Exposure (CVE) ID: CVE-2011-4903 https://security-tracker.debian.org/tracker/CVE-2011-4903
Copyright	Copyright (C) 2014 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.