Vulnerability in Job Fair Project
CVE-2015-4606
Unrestricted file upload vulnerability in the Job Fair (jobfair) extension before 1.0.1 for TYPO3, when using Apache with mod_mime, allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the extension upload folder.
EPSS: 0.027 (84.2th percentile) — read the EPSS interpretation.
Affected products
- Job_fair_project Job_fair
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)