CVE-2012-1605

The Extbase Framework in TYPO3 4.6.x through 4.6.6, 4.7, and 6.0 unserializes untrusted data, which allows remote attackers to unserialize arbitrary objects and possibly execute arbitrary code via vectors related to "a missing signature HMAC for a request argument."...

The vulnerability of the extbase extension of the TYPO3 content management system allows a hacker to execute arbitrary code.

The vulnerability of the extbase extension of the TYPO3 content management system arises from deserialization issues. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...