Description

Unspecified vulnerability in the Extension Manager in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allows remote authenticated administrators to read and possibly modify arbitrary files via a crafted parameter, a different vulnerability than CVE-2010-3714.

Remediation

References

CVE-2010-4068

Related Vulnerabilities

MySQL CVE-2019-2636 Vulnerability (CVE-2019-2636)

WordPress Plugin GN Publisher: Google News Compatible RSS Feeds Cross-Site Scripting (1.5.5)

Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-2957)

WordPress Plugin Shopping Cart & eCommerce Store Information Disclosure (2.0.5)

WordPress Plugin AutomatorWP-The most flexible and powerful no-code automation for WordPress Cross-Site Request Forgery (2.5.0)

Severity

Medium

Classification

CVE-2010-4068 CWE-20

Tags

Missing Update Known Vulnerabilities