TYPO3 Multiple Vulnerabilities (Dec 2010)

TYPO3 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3"; ifdescription...

CVE-2010-5099

TYPO3 4.2.x (before 4.2.16), 4.3.x (before 4.3.9), and 4.4.x (before 4.4.5) are affected by two related issues: (1) fileDenyPattern in the PHP file inclusion protection API failing to filter file types, enabling access to arbitrary PHP files via path traversal (e.g., with %00). (2) CVE-2010-3714’...