Typo3 : Security Vulnerabilities, CVEs, Published In 2012 (Information Leak) CVSS score >= 2
The configuration module in the backend in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote authenticated backend users to obtain the encryption key via unspecified vectors.
Max CVSS
3.5
EPSS Score
0.25%
Published
2012-09-05
Updated
2017-08-29
The Command Line Interface (CLI) script in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to obtain the database name via a direct request.
Max CVSS
5.0
EPSS Score
0.32%
Published
2012-09-04
Updated
2012-09-05
The escapeStrForLike method in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 does not properly escape input when the MySQL database is set to sql_mode NO_BACKSLASH_ESCAPES, which allows remote attackers to obtain sensitive information via wildcard characters in a LIKE query.
Max CVSS
4.3
EPSS Score
0.66%
Published
2012-05-21
Updated
2017-08-29
3 vulnerabilities found