CVE-2014-6236 Unspecified vulnerability in the LumoNet PHP Include (lumophpinclude) extension before 1.2.1 for TYPO3 allows remote attackers to execute arbitrary scripts via vectors related to extension links.
HighCVSS 7.5
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in the LumoNet PHP Include (lumophpinclude) extension before 1.2.1 for TYPO3 allows remote attackers to execute arbitrary scripts via vectors related to extension links.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lumonet php include project lumonet php include | = 1.2.0 | No fix listed |
References
- 60873 third-party-advisory
- typo3.org patch
- typo3.org patch vendor-advisory
- 69569 vdb-entry
- lumophpinclude-unspecified-code-exec(95707) vdb-entry