This host is installed with TYPO3 and is prone to open redirection vulnerability.

Successful exploitation will allow remote attackers to conduct phishing attacks. Impact Level: Application

Upgrade to TYPO3 version 4.1.14, 4.2.13, 4.3.4, 4.4.1 or later, For updates refer to, http://typo3.org/ http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-012

An error exists in Backend, which fails to sanitize "redirect" parameter properly

TYPO3 version before 4.1.14 and below, 4.2.0 to 4.2.13, 4.3.0 to 4.3.3 and 4.4.0

Send a Crafted HTTP GET request and check whether it is able to get sensitive information.

• http://osvdb.org/66864
• http://secunia.com/advisories/40742/
• http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-012

---

Updated on 2015-03-25