CVE-2014-6236

Published: Sep 11, 2014Modified: May 6, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Unspecified vulnerability in the LumoNet PHP Include (lumophpinclude) extension before 1.2.1 for TYPO3 allows remote attackers to execute arbitrary scripts via vectors related to extension links.

Affected (1)

Products: Lumonet Php Include Project: Lumonet Php Include

Lumonet Php Include Project

1 product

Lumonet Php Include

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Lumonet Php Include Project Lumonet Php Include	Version 1.2.0

References (10)

http://secunia.com/advisories/60873

Source: cve@mitre.org

http://typo3.org/extensions/repository/view/lumophpinclude

Source: cve@mitre.org

Patch

http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-010

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/69569

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/95707

Source: cve@mitre.org

http://secunia.com/advisories/60873