ID de Prueba:	1.3.6.1.4.1.25623.1.0.807826
Categoría:	Web application abuses
Título:	TYPO3 Multiple Vulnerabilities-03 (May 2016)
Resumen:	TYPO3 is prone to multiple vulnerabilities.
Descripción:	Summary: TYPO3 is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - An error in some backend components which fail to properly encode user input. - An error in the default authentication service which misses to invalidate empty strings as password. - The workspace/version preview link created by a privileged (backend) user could be abused to obtain certain editing permission. Vulnerability Impact: Successful exploitation will allow remote attackers to conduct authentication bypass, XSS and privilege escalation attacks. Affected Software/OS: TYPO3 versions 6.2.x before 6.2.20, 7.6.x before 7.6.5 and 8.0.0 Solution: Upgrade to TYPO3 version 6.2.20 or 7.6.5 or 8.0.1 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.