Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
TYPO3 Permissions Privileges and Access Controls Vulnerability - CVE-2008-2717 - Vulnerability Database
TYPO3

TYPO3 Permissions Privileges and Access Controls Vulnerability - CVE-2008-2717

Medium
Reference: CVE-2008-2717
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2008-2717
Title: TYPO3 Permissions Privileges and Access Controls Vulnerability
Overview:

TYPO3 4.0.x before 4.0.9 4.1.x before 4.1.7 and 4.2.x before 4.2.1 uses an insufficiently restrictive default fileDenyPattern for Apache which allows remote attackers to bypass security restrictions and upload configuration files such as .htaccess or conduct file upload attacks using multiple extensions.