CVE-2015-4606

Unrestricted file upload vulnerability in the Job Fair (jobfair) extension before 1.0.1 for TYPO3, when using Apache with mod_mime, allows remote attackers to…

published June 16, 2015

CVSS
—
EPSS
3%
Percentile
85.3
In the wild
Unconfirmed
What it is

Unrestricted file upload vulnerability in the Job Fair (jobfair) extension before 1.0.1 for TYPO3, when using Apache with mod_mime, allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the extension upload folder.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02622 · 85.3th percentile
Published
2015-06-16T16:00Z
EPSS history
Timeline
  • 16 JUN 16:00Z
    Unrestricted file upload vulnerability in the Job Fair (jobfair) extension before 1.0.1 for TYPO3, when using Apache with mod_mime, allows remote attackers to…
    cvelistv5