Description

The Command Line Interface (CLI) script in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to obtain the database name via a direct request.

Remediation

References

CVE-2012-1607

Related Vulnerabilities

WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-5487)

Undertow Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') Vulnerability (CVE-2018-1067)

MySQL CVE-2022-21334 Vulnerability (CVE-2022-21334)

WordPress Plugin Sexy Add Template Cross-Site Request Forgery (1.0)

PHP Out-of-bounds Write Vulnerability (CVE-2017-9228)

Severity

Medium

Classification

CVE-2012-1607 CWE-200

Tags

Missing Update Known Vulnerabilities