CVE-2008-2345: Code Injection
Published May 19, 2008
·Updated
Unspecified vulnerability in the airfilemanager 0.6.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary PHP code via unspecified vectors related to "insufficient file filtering."
Affected Software
1 affected component
Typo3 Air Filemanager<=0.6.0
Remediation
Event History
May 19, 2008
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-2345?
CVE-2008-2345 is considered a high-severity vulnerability due to its potential for remote code execution.
2
How can I mitigate CVE-2008-2345?
To mitigate CVE-2008-2345, upgrade the air_filemanager extension to version 0.6.1 or later.
3
What versions are affected by CVE-2008-2345?
CVE-2008-2345 affects air_filemanager version 0.6.0 and earlier.
4
What type of vulnerability is CVE-2008-2345?
CVE-2008-2345 is an unspecified vulnerability allowing remote code execution through insufficient file filtering.
5
Who is at risk for CVE-2008-2345?
Websites using TYPO3 with the air_filemanager extension version 0.6.0 or earlier are at risk for CVE-2008-2345.