Description

The Command Line Interface (CLI) script in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to obtain the database name via a direct request.

Remediation

References

CVE-2012-1607

Related Vulnerabilities

WordPress Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) Vulnerability (CVE-2017-5493)

WordPress Plugin FireStorm Shopping Cart eCommerce SQL Injection (2.07.02)

WordPress Plugin PI Button includes Backdoor [Only if downloaded via the vendor website] (3.3.3)

Zenphoto Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-5594)

Craft CMS Missing Encryption of Sensitive Data Vulnerability (CVE-2018-20465)

Severity

Medium

Classification

CVE-2012-1607 CWE-200

Tags

Missing Update Known Vulnerabilities