PT-2013-2031

Name of the Vulnerable Software and Affected Versions TYPO3 Formhandler extension versions prior to 1.4.1 Description The issue allows remote authenticated users with certain permissions to execute arbitrary SQL commands. Recommendations For versions prior to 1.4.1, update to version 1.4.1 or lat...

CVE-2012-6577: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Formhandler extension before 1.4.1 for TYPO3 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors...

Several Vulnerabilities in extension MailformPlus (th_mailformplus)

Several vulnerabilities have been found in the following third-party TYPO3 extension: thmailformplus Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 4.0.15 and below Vulnerability Types: Cross-Site Scripting Severit...

Several Vulnerabilities in extension Formhandler (formhandler)

It has been discovered that the extension Formhandler formhandler is vulnerable to SQL-Injection and Cross-Site Scripting. Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 0.9.14 and below Vulnerability Types: SQL...

CVE-1999-1051

Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to read arbitrary files via the replymessageattach attachment parameter...

CVE-1999-1051

Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to read arbitrary files via the replymessageattach attachment parameter...

Matt Wright - 'FormHandler.cgi' 2.0 Reply Attachment

source: https://www.securityfocus.com/bid/799/info Any file that the FormHandler.cgi has read access to the cgi is typically run as user 'nobody' on Unix systems can be specified as an attachment in a reply email. This could allow an attacker to gain access to sensitive files such as /etc/passwd...

formhandler.cgi.txt

From: Mnemonix Subject: FormHandler.cgi FormHandler.cgi available from http://www.cgi-perl.com/programs/FormHandler uses hard coded physical paths for templates etc so it's possible to get sensitive files like /etc/passwd by modifying a site's f orm and submitting it. Cheers, David Litchfield...