Description

TYPO3 3.8.0 and earlier allows remote attackers to obtain sensitive information via a direct request to misc/phpcheck/, which invokes the phpinfo function and prints values of unspecified environment variables.

Remediation

References

CVE-2005-4875

Related Vulnerabilities

WordPress Plugin DukaPress SQL Injection (2.5.9)

WordPress Plugin Social Share Icons & Social Share Buttons Cross-Site Scripting (3.0.5)

MySQL CVE-2012-0583 Vulnerability (CVE-2012-0583)

WebLogic CVE-2020-2547 Vulnerability (CVE-2020-2547)

Oracle Database Server CVE-2023-21949 Vulnerability (CVE-2023-21949)

Severity

High

Classification

CVE-2005-4875 CWE-200

Tags

Missing Update Known Vulnerabilities