Typo3 allows remote command execution via PHP

Posted on Internet.com See other posts from Internet.com
Published on Tue, 13 Apr 2010 04:00:00 +0100 Indexed on 2010/04/13 13:23 UTC
Read the original article Hit count: 342

Filed under:
<b>The H Open:</b> "In versions 4.3.0, 4.3.1 and 4.3.2 of Typo3 (as well as previous versions of the 4.4 development branch), attackers can inject PHP code from an external server and execute it within the Typo3 context."

© Internet.com or respective owner