Typo3 : Security Vulnerabilities, CVEs, Published In September 2012 (Information Leak)
The configuration module in the backend in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote authenticated backend users to obtain the encryption key via unspecified vectors.
Max CVSS
3.5
EPSS Score
0.25%
Published
2012-09-05
Updated
2017-08-29
The Command Line Interface (CLI) script in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to obtain the database name via a direct request.
Max CVSS
5.0
EPSS Score
0.32%
Published
2012-09-04
Updated
2012-09-05
2 vulnerabilities found