Description

The be_user_creation task in TYPO3 4.2.x before 4.2.15 and 4.3.x before 4.3.7 allows remote authenticated users to gain privileges via a crafted POST request that creates a user account with arbitrary group memberships.

Remediation

References

CVE-2010-3716

Related Vulnerabilities

WordPress Plugin Discount Rules for WooCommerce Security Bypass (2.2.0)

PHP Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') Vulnerability (CVE-2018-19518)

WebLogic CVE-2020-2548 Vulnerability (CVE-2020-2548)

WordPress Plugin Appointment Hour Booking-WordPress Booking Cross-Site Scripting (1.3.16)

Plone CMS Improper Restriction of Rendered UI Layers or Frames Vulnerability (CVE-2024-0669)

Severity

Medium

Classification

CVE-2010-3716 CWE-20

Tags

Missing Update Known Vulnerabilities