The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2, when the DAM extension or ftp upload is enabled, allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x
    before 4.3beta2, when the DAM extension or ftp upload is enabled, allows remote authenticated users to
    execute arbitrary commands via shell metacharacters in a filename. (CVE-2009-3631)

Several remote vulnerabilities have been discovered in the TYPO3 web content management framework. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2009-3628     The Backend subcomponent allows remote authenticated     users to determine an encryption key via crafted input     to a form field.

  - CVE-2009-3629     Multiple cross-site scripting (XSS) vulnerabilities in     the Backend subcomponent allow remote authenticated     users to inject arbitrary web script or HTML.

  - CVE-2009-3630     The Backend subcomponent allows remote authenticated     users to place arbitrary websites in TYPO3 backend     framesets via crafted parameters.

  - CVE-2009-3631     The Backend subcomponent, when the DAM extension or ftp     upload is enabled, allows remote authenticated users to     execute arbitrary commands via shell metacharacters in a     filename.

  - CVE-2009-3632     SQL injection vulnerability in the traditional frontend     editing feature in the Frontend Editing subcomponent     allows remote authenticated users to execute arbitrary     SQL commands.

  - CVE-2009-3633     Cross-site scripting (XSS) vulnerability allows remote     attackers to inject arbitrary web script.

  - CVE-2009-3634     Cross-site scripting (XSS) vulnerability in the Frontend     Login Box (aka felogin) subcomponent allows remote     attackers to inject arbitrary web script or HTML.

  - CVE-2009-3635     The Install Tool subcomponent allows remote attackers to     gain access by using only the password's md5 hash as a     credential.

  - CVE-2009-3636     Cross-site scripting (XSS) vulnerability in the Install     Tool subcomponent allows remote attackers to inject     arbitrary web script or HTML.

TYPO3 develop team reports :

Affected versions: TYPO3 versions 4.0.13 and below, 4.1.12 and below, 4.2.9 and below, 4.3.0beta1 and below.

SQL injection, Cross-site scripting (XSS), Information disclosure, Frame hijacking, Remote shell command execution and Insecure Install Tool authentication/session handling.

ID	Name	Product	Family	Severity
432061	SCA: security update for typo3/cms-backend (GHSA-3cqw-pxgr-jhrm)	Tenable Cloud Security	SCA Checks	critical
432061	SCA: security update for typo3/cms-backend (GHSA-3cqw-pxgr-jhrm)	Tenable Self-Hosted Container Security	SCA Checks	critical
432019	SCA: security update for typo3/cms-backend (GHSA-3cqw-pxgr-jhrm)	Tenable Cloud Security	SCA Checks	critical
432019	SCA: security update for typo3/cms-backend (GHSA-3cqw-pxgr-jhrm)	Tenable Self-Hosted Container Security	SCA Checks	critical
44791	Debian DSA-1926-1 : typo3-src - several vulnerabilities	Nessus	Debian Local Security Checks	high
42404	FreeBSD : typo3 -- multiple vulnerabilities in TYPO3 Core (6693bad2-ca50-11de-8ee8-00215c6a37bb)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2009-3631

critical

Tenable Plugins

critical

critical

critical

critical

high

high