This host is installed with TYPO3 and is prone to multiple vulnerabilities.

Successful exploitation will allow remote attackers to execute arbitrary code or steal the victim's cookie-based authentication credentials. Impact Level: Application

Upgrade to TYPO3 version 4.0.10, 4.1.8, 4.2.4 or later, For updates refer to, http://typo3.org/

Multiple error exists in the application, - An error exist in Indexed Search Engine system extension which fails to validate user-supplied input properly. - An error exist in session tokens, which is caused by the improper validation. - An error exist in Workspace module which fails to validate user-supplied input properly.

TYPO3 versions 4.0.0 to 4.0.9, 4.1.0 to 4.1.7, 4.2.0 to 4.2.3

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

• http://osvdb.org/51535
• http://osvdb.org/53541
• http://typo3.org/teams/security/security-bulletins/typo3-core/TYPO3-SA-2009-001/
• http://xforce.iss.net/xforce/xfdb/48135

---

Updated on 2015-03-25