CVE-2013-4680

Open redirect vulnerability in Maag Form Captcha extension 2.0.0 and earlier for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

CVSS v2.0 6.4 MEDIUM

6.4^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability : 10.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://osvdb.org/93818
http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-007/	Vendor Advisory
http://www.securityfocus.com/bid/60298
https://exchange.xforce.ibmcloud.com/vulnerabilities/84670

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:urs_maag:maag_form_captcha:1.0.0:::::::*
	cpe:2.3:a:urs_maag:maag_form_captcha:1.0.1:::::::*
	cpe:2.3:a:urs_maag:maag_form_captcha:1.0.2:::::::*
	cpe:2.3:a:urs_maag:maag_form_captcha:1.1.0:::::::*
	cpe:2.3:a:urs_maag:maag_form_captcha:1.1.1:::::::*
	cpe:2.3:a:urs_maag:maag_form_captcha:1.1.2:::::::*
	cpe:2.3:a:urs_maag:maag_form_captcha:1.1.3:::::::*
	cpe:2.3:a:urs_maag:maag_form_captcha:1.1.4:::::::*
	cpe:2.3:a:urs_maag:maag_form_captcha:1.2.0:::::::*
	cpe:2.3:a:urs_maag:maag_form_captcha:1.2.1:::::::*

cpe:2.3:a:typo3:typo3:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2013-06-25 18:55

Updated : 2024-02-28 12:00

NVD link : CVE-2013-4680

Mitre link : CVE-2013-4680

CVE.ORG link : CVE-2013-4680

JSON object : View

Products Affected

typo3

typo3

urs_maag

maag_form_captcha

CWE

NVD-CWE-noinfo

{"id": "CVE-2013-4680", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-06-25T18:55:01.283", "references": [{"url": "http://osvdb.org/93818", "source": "cve@mitre.org"}, {"url": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-007/", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/60298", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/84670", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Open redirect vulnerability in Maag Form Captcha extension 2.0.0 and earlier for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors."}, {"lang": "es", "value": "Vulnerabilidad de inyecci\u00f3n SQL en la extensi\u00f3n \"Maag Form Captcha\" v2.0.0 y anteriores para TYPO3 permite a atacantes remotos ejecutar comandos SQL arbitrarios a trav\u00e9s de vectores no especificados."}], "lastModified": "2017-08-29T01:33:38.857", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:urs_maag:maag_form_captcha:1.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DC0811A1-1E3B-4302-B163-08B973027D68"}, {"criteria": "cpe:2.3:a:urs_maag:maag_form_captcha:1.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "989E684D-3404-40A5-8E4E-8EA45FA30338"}, {"criteria": "cpe:2.3:a:urs_maag:maag_form_captcha:1.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ACC64548-2FBD-46AE-BC9A-3043B4478DB9"}, {"criteria": "cpe:2.3:a:urs_maag:maag_form_captcha:1.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "42F0BF75-0CC8-42D1-BC4E-4B7656851804"}, {"criteria": "cpe:2.3:a:urs_maag:maag_form_captcha:1.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "99EAAFEA-A13D-4AE7-97E6-B4B99DEB9EBB"}, {"criteria": "cpe:2.3:a:urs_maag:maag_form_captcha:1.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "62A6433C-1F5F-4F37-B87B-B985B21A6842"}, {"criteria": "cpe:2.3:a:urs_maag:maag_form_captcha:1.1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E75E397-389F-42B3-8374-619ED4CAFF10"}, {"criteria": "cpe:2.3:a:urs_maag:maag_form_captcha:1.1.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5C6961E1-5996-425B-AFBB-6AC23F81E779"}, {"criteria": "cpe:2.3:a:urs_maag:maag_form_captcha:1.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F0D6F755-020F-42BB-9598-EB59595B4F8D"}, {"criteria": "cpe:2.3:a:urs_maag:maag_form_captcha:1.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4B7A2D17-5EEC-450F-B827-8C8565662DC1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:typo3:typo3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E66C5ABA-7727-4562-A792-5E450098D520"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}