Description

The Command Line Interface (CLI) script in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to obtain the database name via a direct request.

Remediation

References

CVE-2012-1607

Related Vulnerabilities

WordPress Plugin Rating-Widget:Star Review System Cross-Site Scripting (2.8.8)

Ruby on Rails URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2021-44528)

WordPress Plugin ArcadePress 'upload.php' Arbitrary File Upload (0.65)

PHP Out-of-bounds Read Vulnerability (CVE-2016-10161)

WordPress Plugin WPJobBoard SQL Injection (5.6.4)

Severity

Medium

Classification

CVE-2012-1607 CWE-200

Tags

Missing Update Known Vulnerabilities