CVE-2015-4606

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.67%

Published

Jun 16, 2015

Modified

May 6, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Unrestricted file upload vulnerability in the Job Fair (jobfair) extension before 1.0.1 for TYPO3, when using Apache with mod_mime, allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the extension upload folder.

Affected Products (1)

job_fair_project · job_fairvulnerable

References (6)

http://typo3.org/extensions/repository/view/jobfair

Patch

http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2015-013/

Vendor Advisory

http://www.securityfocus.com/bid/75238

http://typo3.org/extensions/repository/view/jobfair

Patch

http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2015-013/

Vendor Advisory

http://www.securityfocus.com/bid/75238

KEV Catalog EPSS Scores Vendors All CVEs