Description

Unspecified vulnerability in the Extension Manager in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allows remote authenticated administrators to read and possibly modify arbitrary files via a crafted parameter, a different vulnerability than CVE-2010-3714.

Remediation

References

CVE-2010-4068

Related Vulnerabilities

WordPress Plugin Viral Quiz Maker-OnionBuzz SQL Injection (1.2.6)

Oracle Database Server CVE-2009-1991 Vulnerability (CVE-2009-1991)

MySQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2013-1861)

Drupal Core 5.x Session Fixation (5.0 - 5.8)

WordPress Plugin Qode Instagram Widget (embeded in Bridge-Creative Multi-Purpose WordPress Theme) Open Redirect (2.0.1)

Severity

Medium

Classification

CVE-2010-4068 CWE-20

Tags

Missing Update Known Vulnerabilities