ID de Prueba:	1.3.6.1.4.1.25623.1.0.804466
Categoría:	Web application abuses
Título:	TYPO3 Color Picker Wizard Remote PHP Code Execution Vulnerability
Resumen:	TYPO3 is prone to PHP code execution vulnerability.
Descripción:	Summary: TYPO3 is prone to PHP code execution vulnerability. Vulnerability Insight: The flaw is triggered as the program fails to validate the authenticity of input in an unserialize() call. Vulnerability Impact: Successful exploitation will allow remote attackers to execute arbitrary PHP code. Affected Software/OS: TYPO3 versions 4.5.0 to 4.5.33, 4.7.0 to 4.7.18, 6.0.0 to 6.0.13 and 6.1.0 to 6.1.8 Solution: Upgrade to TYPO3 4.5.34, 4.7.19, 6.0.14 or 6.1.9 or later. CVSS Score: 6.0 CVSS Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-3942 Debian Security Information: DSA-2942 (Google Search) http://www.debian.org/security/2014/dsa-2942 http://www.openwall.com/lists/oss-security/2014/06/03/2 SuSE Security Announcement: openSUSE-SU-2014:0813 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-06/msg00037.html
Copyright	Copyright (C) 2014 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.