CVE-2008-3043

WEC Discussion Forum < 1.6.2 - Remote Code Execution via File Upload

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in the WEC Discussion Forum (wec_discussion) extension 1.6.2 and earlier for TYPO3 allows attackers to execute arbitrary code via vectors related to "certain file types."

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/30026
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30905
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/43512

Scores

EPSS 0.0078
EPSS Percentile 74.0%

Details

CWE
CWE-94
Status published
Products (3)
typo3/wec_discussion_forum 1.6.0
typo3/wec_discussion_forum 1.6.1
typo3/wec_discussion_forum < 1.6.2
Published Jul 07, 2008
Tracked Since Feb 18, 2026