Vulnerabilities > CVE-2015-4606 - Unspecified vulnerability in JOB Fair Project JOB Fair

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

job-fair-project

NVD

Published: 2015-06-16

Updated: 2024-11-21

Summary

Unrestricted file upload vulnerability in the Job Fair (jobfair) extension before 1.0.1 for TYPO3, when using Apache with mod_mime, allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the extension upload folder.

Vulnerable Configurations

Part	Description	Count
Application	Job_Fair_Project JOB Fair Project JOB Fair 0.0.1 JOB Fair Project JOB Fair 0.0.2 JOB Fair Project JOB Fair 0.0.3 JOB Fair Project JOB Fair 0.0.4 JOB Fair Project JOB Fair 0.0.5 JOB Fair Project JOB Fair 0.0.6 JOB Fair Project JOB Fair 0.0.7 JOB Fair Project JOB Fair 0.0.8 JOB Fair Project JOB Fair 0.1.0 JOB Fair Project JOB Fair 0.1.1 JOB Fair Project JOB Fair 0.1.2 JOB Fair Project JOB Fair 0.1.3 JOB Fair Project JOB Fair 1.0.0	13

Summary

Vulnerable Configurations

References