https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-25T05:57:21.535579+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-107349 EUVD-2026-107349 2026-10-25T05:57:21.619169+00:00 EUVD-2026-107349 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4250 fkie_cve-2013-4250 2026-10-25T05:57:21.619204+00:00

The (1) file upload component and (2) File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.8 and 6.1.x before 6.1.3 do not properly check file extensions, which allow remote authenticated editors to execute arbitrary PHP code by uploading a .php file.

 https://cve.radiocsirt.org/vuln/ghsa-54jj-pxx2-pv8h GHSA-54jj-pxx2-pv8h — TYPO3 doesn't properly check file extensions 2026-10-25T05:57:21.619235+00:00

Affected: Packagist: typo3/cms

The (1) file upload component and (2) File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.8 and 6.1.x before 6.1.3 do not properly check file extensions, which allow remote authenticated editors to execute arbitrary PHP code by uploading a .php file.

 https://cve.radiocsirt.org/vuln/gsd-2013-4250 gsd-2013-4250 2026-10-25T05:57:21.619261+00:00 gsd-2013-4250