CVE-2015-4606

ALTO 7.5CVE-2015-4606 · Published 16/06/2015 · updated 17/06/2026

In breve

CVE-2015-4606 è una vulnerabilità ALTO (CVSS 7.5) che riguarda job fair (job fair project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.6%, superiore al 85.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
job fair job_fair_project	`≤ 1.0.0`	No fix yet

Description

Unrestricted file upload vulnerability in the Job Fair (jobfair) extension before 1.0.1 for TYPO3, when using Apache with mod_mime, allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the extension upload folder.

References

typo3.org/extensions/repository/view/jobfair · Patch
typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2015-013 · Vendor Advisory
securityfocus.com/bid/75238

Altre vulnerabilità di job fair

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free