This host is installed with TYPO3 and is prone to multiple vulnerabilities.

Successful exploitation will allow remote attackers to steal the victim's cookie-based authentication credentials or get sensitive information. Impact Level: Application

Upgrade to TYPO3 version 4.4.14, 4.5.14 4.6.7 or later, For updates refer to, http://typo3.org/

Multiple error exists in the application, - An error exist in Backend, which fails to validate user supplied input properly. - An error exist in Command Line Interface script, which on directly accessed with a browser may disclose the database name - An error exist in HTML Sanitizing API, which fails to validate user supplied input properly.

TYPO3 version 4.4.0 to 4.4.13, 4.5.0 to 4.5.13 and 4.6.0 to 4.6.6

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

• http://osvdb.org/80760
• http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001
• http://www.openwall.com/lists/oss-security/2012/03/30/4

---

Updated on 2015-03-25