TYPO3 Apache Solr Unspecified Cross Site Scripting and PHP Code Execution Vulnerabilities

Bugtraq ID:	62674
Class:	Input Validation Error
CVE:	CVE-2013-6289 CVE-2013-6288
Remote:	Yes
Local:	No
Published:	Sep 25 2013 12:00AM
Updated:	Nov 01 2013 12:21AM
Credit:	Gerrit Venema, Michel Tremblay and TYPO3 Security Team Member Georg Ringer
Vulnerable:
Not Vulnerable:

TYPO3 Apache Solr Unspecified Cross Site Scripting and PHP Code Execution Vulnerabilities

The TYPO3 Apache Solr extension is prone to unspecified cross-site scripting and PHP code-execution vulnerabilities.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials or execute arbitrary PHP code in the context of the application.

Apache Solr 2.8.2 and prior versions are vulnerable.

TYPO3 Apache Solr Unspecified Cross Site Scripting and PHP Code Execution Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

TYPO3 Apache Solr Unspecified Cross Site Scripting and PHP Code Execution Vulnerabilities

References:

• TYPO3 Homepage (TYPO3)