RCE in TYPO3

CVE-2010-1153

PHP remote file inclusion vulnerability in the autoloader in TYPO3 4.3.x before 4.3.3 allows remote attackers to execute arbitrary PHP code via a URL in an input field associated with the className variable.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.012 (63.8th percentile) — read the EPSS interpretation.

Affected products

  • Typo3 — versions 4.3.0, 4.3.1, 4.3.2
  • N/a — versions n/a

Weakness classification (CWE)

References