TYPO3 air_filemanager extension version 0.6.0 and earlier
Remote attacker uploads malicious PHP file through file manager interface by bypassing insufficient file type/extension validation filters
Upgrade TYPO3 air_filemanager extension to version 0.6.1 or later, disable the extension if update is unavailable, implement strict file upload validation and store uploads outside web root
버전이 0.6.0 이하로 나타나면 취약함; 0.6.1 이상이거나 디렉토리가 없으면 패치됨
find /var/www -name 'air_filemanager' -type d 2>/dev/null | xargs -I {} cat {}/ext_emconf.php 2>/dev/null | grep -oP "version.*?[0-9]+\.[0-9]+\.[0-9]+" | head -1
AV:N/AC:L/Au:N/C:C/I:C/A:C