CVE-2008-3043 Code injection in n/a

High 7.5 Published 7 Jul 2008 Updated 7 Aug 2024

Attackers can execute arbitrary code in the WEC Discussion Forum extension for TYPO3 via specific file types.

Exploited in the wild: Not known
Login needed: Not stated
Attackable: Over the internet
Victim action needed: Not stated
Fix: None listed

What is CVE-2008-3043?

CVE-2008-3043 is a high-severity code injection vulnerability in n/a, published on 7 Jul 2008. It can be exploited over the network.

Official description

Unspecified vulnerability in the WEC Discussion Forum (wec_discussion) extension 1.6.2 and earlier for TYPO3 allows attackers to execute arbitrary code via vectors related to "certain file types."

Weakness: CWE-94

Which versions are affected by CVE-2008-3043?

It affects 1 product.

Products include Typo3 Wec Discussion Forum.

How do I fix CVE-2008-3043?

No fix has been published for CVE-2008-3043 yet. Limit exposure of the affected software until one is available.

Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.

Is CVE-2008-3043 being exploited?

There is no known exploitation of CVE-2008-3043 in the wild and no public exploit code.

Sources

Also known as GHSA-cp3h-563p-cmfg.