Description

view_help.php in the backend help system in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote authenticated backend users to unserialize arbitrary objects and possibly execute arbitrary PHP code via an unspecified parameter, related to a "missing signature (HMAC)."

Remediation

References

CVE-2012-3527

Related Vulnerabilities

WordPress Plugin Wise Chat CSV Injection (2.8.3)

WordPress Plugin Better WordPress Minify Arbitrary File Disclosure (1.2.2)

WordPress Plugin Tierra's Billboard Manager SQL Injection (1.14)

WordPress Plugin Ad-Manager Open Redirect (1.1.2)

MySQL CVE-2013-3804 Vulnerability (CVE-2013-3804)

Severity

Medium

Classification

CVE-2012-3527

Tags

Missing Update Known Vulnerabilities