CVE-2014-6236

Unspecified vulnerability in the LumoNet PHP Include (lumophpinclude) extension before 1.2.1 for TYPO3 allows remote attackers to execute arbitrary scripts via vectors related to extension links.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2014-09-11

Last modified

2024-08-06

Affected products

• Lumonet Php Include (Lumonet Php Include Project)

References

• http://secunia.com/advisories/60873
• http://typo3.org/extensions/repository/view/lumophpinclude
• http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-010
• http://www.securityfocus.com/bid/69569
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95707