Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2013-7073
HistoryDec 23, 2013 - 11:55 p.m.

Code injection

2013-12-2323:55:00
PRIOn knowledge base
www.prio-n.com
6

6.7 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

54.9%

JSON

The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 does not check permissions, which allows remote authenticated editors to read arbitrary TYPO3 table columns via unspecified parameters.

CPENameOperatorVersion
typo3eq4.5.30
typo3eq4.5.3
typo3eq4.5.27
typo3eq4.5.9
typo3eq4.5.12
typo3eq4.5.24
typo3eq4.5.15
typo3eq4.5.5
typo3eq4.5.13
typo3eq4.5.17
Rows per page:
1-10 of 681

Related

cvelist 1
ubuntucve 1
cve 1
osv 1
github 1
nessus 4
openvas 4
suse 1
debian 2
securityvulns 2
typo3 1
cvelist
cvelist
CVE-2013-7073
2013-12-23 23:00:00
ubuntucve
ubuntucve
CVE-2013-7073
2013-12-23 00:00:00
cve
cve
CVE-2013-7073
2013-12-23 23:55:00
osv
osv
TYPO3 vulnerable to Information Disclosure via Content Editing Wizards component
2022-05-17 03:46:18
github
github
TYPO3 vulnerable to Information Disclosure via Content Editing Wizards component
2022-05-17 03:46:18
nessus
nessus
openSUSE Security Update : typo3-cms-4_5 (openSUSE-2016-1022)
2016-08-30 00:00:00
openSUSE Security Update : typo3 (openSUSE-2016-959)
2016-08-12 00:00:00
openSUSE Security Update : typo3-cms-4_7 (openSUSE-2016-1002)
2016-08-22 00:00:00
openvas
openvas
openSUSE: Security Advisory for Typo3 (openSUSE-SU-2016:2025-1)
2016-08-11 00:00:00
TYPO3 Multiple Vulnerabilities (Dec 2013)
2014-01-06 00:00:00
Debian Security Advisory DSA 2834-1 (typo3-src - several vulnerabilities)
2014-01-01 00:00:00
suse
suse
Important security fixes for Typo3 (important)
2016-08-10 22:09:17
debian
debian
[SECURITY] [DSA 2834-1] typo3-src security update
2014-01-01 16:19:19
[SECURITY] [DSA 2834-1] typo3-src security update
2014-01-01 16:19:37
securityvulns
securityvulns
[SECURITY] [DSA 2834-1] typo3-src security update
2014-01-09 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2014-01-09 00:00:00
typo3
typo3
Multiple Vulnerabilities in TYPO3 CMS
2013-12-10 00:00:00

6.7 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

54.9%

JSON
Related for PRION:CVE-2013-7073
cvelist1ubuntucve1cve1osv1github1nessus4openvas4suse1debian2securityvulns2typo31