Description

view_help.php in the backend help system in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote authenticated backend users to unserialize arbitrary objects and possibly execute arbitrary PHP code via an unspecified parameter, related to a "missing signature (HMAC)."

Remediation

References

CVE-2012-3527

Related Vulnerabilities

WordPress Plugin Event Tickets CSV Injection (4.10.7.1)

WordPress Plugin PictoBrowser Cross-Site Request Forgery (0.3.1)

WordPress Other Vulnerability (CVE-2005-1102)

Joomla CVE-2020-35610 Vulnerability (CVE-2020-35610)

WordPress Plugin Simple Banner Cross-Site Scripting (2.11.0)

Severity

Medium

Classification

CVE-2012-3527

Tags

Missing Update Known Vulnerabilities