Description

Unspecified vulnerability in the Extension Manager in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allows remote authenticated administrators to read and possibly modify arbitrary files via a crafted parameter, a different vulnerability than CVE-2010-3714.

Remediation

References

CVE-2010-4068

Related Vulnerabilities

PleskWin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-35976)

Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-27425)

OpenSSL Improper Input Validation Vulnerability (CVE-2008-5077)

silverstripeCMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5093)

WordPress Plugin Gallery-Flagallery Photo Portfolio Multiple Vulnerabilities (2.00)

Severity

Medium

Classification

CVE-2010-4068 CWE-20

Tags

Missing Update Known Vulnerabilities