CVE

Id
56770  
CVE No.
CVE-2012-3527  
Status
Candidate  
Description
view_help.php in the backend help system in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote authenticated backend users to unserialize arbitrary objects and possibly execute arbitrary PHP code via an unspecified parameter, related to a "missing signature (HMAC)."  
Phase
Assigned (20120614)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
588059 56770 CVE-2012-3527 MLIST:[oss-security] 20120822 Re: CVE request: Typo3  View
588060 56770 CVE-2012-3527 URL:http://www.openwall.com/lists/oss-security/2012/08/22/8  View
588061 56770 CVE-2012-3527 CONFIRM:http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-004/  View
588062 56770 CVE-2012-3527 DEBIAN:DSA-2537  View
588063 56770 CVE-2012-3527 URL:http://www.debian.org/security/2012/dsa-2537  View
588064 56770 CVE-2012-3527 OSVDB:84773  View
588065 56770 CVE-2012-3527 URL:http://osvdb.org/84773  View
588066 56770 CVE-2012-3527 SECUNIA:50287  View
588067 56770 CVE-2012-3527 URL:http://secunia.com/advisories/50287  View
588068 56770 CVE-2012-3527 XF:typo3-viewhelp-code-exec(77791)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30273 JVNDB-2012-005981 JBoss Enterprise Portal Platform の GateIn Portal コンポーネントにおけるクロスサイトリクエストフォージェリの脆弱性 JBoss Enterprise Portal Platform の GateIn Portal コンポーネントには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2012-3532 56770 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005981.html  View