Unscored severity · published May 19, 2008
CVE-2008-2345
Unspecified vulnerability in the air_filemanager 0.6.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary PHP code via unspecified vectors related to…
–
CVSS
1.9%
EPSS
No
On KEV
Description
Unspecified vulnerability in the air_filemanager 0.6.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary PHP code via unspecified vectors related to "insufficient file filtering."
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
Air Filemanager · Typo3
through 0.6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2345
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2345
Patch
http://typo3.org/teams/security/security-bulletins/typo3-20080515-2/
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/42449
More from Air Filemanager
–
CVE-2008-2344
Cross-site scripting (XSS) vulnerability in the air_filemanager 0.6.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via…