Description

Directory traversal vulnerability in the TypoScript setup in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated administrators to read arbitrary files via unspecified vectors related to the "file inclusion functionality."

Remediation

References

CVE-2010-5101

Related Vulnerabilities

PostgreSQL Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2014-8161)

WordPress Plugin Commentator Cross-Site Scripting (2.5.2)

Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-13403)

MSSQL information disclosure vulnerability (CVE-2019-0819)

WordPress Plugin WordPress Landing Pages Unspecified Vulnerability (2.0.2)

Severity

Medium

Classification

CVE-2010-5101 CWE-22

Tags

Missing Update Known Vulnerabilities