CVE-2014-6236

ALTO 7.5CVE-2014-6236 · Published 11/09/2014 · updated 17/06/2026

En resumen

CVE-2014-6236 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a lumonet php include (lumonet php include project).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.7%, mayor que el 85.7% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
lumonet php include lumonet_php_include_project	`= 1.2.0`	No fix yet

Description

Unspecified vulnerability in the LumoNet PHP Include (lumophpinclude) extension before 1.2.1 for TYPO3 allows remote attackers to execute arbitrary scripts via vectors related to extension links.

References

secunia.com/advisories/60873
typo3.org/extensions/repository/view/lumophpinclude · Patch
typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-010 · Patch
securityfocus.com/bid/69569
exchange.xforce.ibmcloud.com/vulnerabilities/95707

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free