Lucene search
Ubuntu.comUB:CVE-2012-3527HistorySep 05, 2012 - 12:00 a.m.
CVE-2012-3527
2012-09-0500:00:00
ubuntu.com
ubuntu.com
16
CVSS2
4.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:S/C:P/I:P/A:P
EPSS
0.003
Percentile
68.1%
view_help.php in the backend help system in TYPO3 4.5.x before 4.5.19,
4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote authenticated
backend users to unserialize arbitrary objects and possibly execute
arbitrary PHP code via an unspecified parameter, related to a “missing
signature (HMAC).”
Bugs
References
Related
nvd
nvd
CVE-2012-3527
2012-09-05 23:55:01
cve
cve
CVE-2012-3527
2012-09-05 23:55:01
prion
prion
Design/Logic Flaw
2012-09-05 23:55:00
cvelist
cvelist
CVE-2012-3527
2012-09-05 23:00:00
osv
osv
typo3-src - several
2012-08-30 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2537-1] typo3-src security update
2012-09-02 00:00:00
debian
debian
[SECURITY] [DSA 2537-1] typo3-src security update
2012-08-30 19:58:21
openvas
openvas
Debian Security Advisory DSA 2537-1 (typo3-src)
2012-09-07 00:00:00
TYPO3 Multiple Vulnerabilities (Aug 2012)
2014-01-03 00:00:00
Debian: Security Advisory (DSA-2537-1)
2012-09-07 00:00:00
nessus
nessus
Debian DSA-2537-1 : typo3-src - several vulnerabilities
2012-08-31 00:00:00
CVSS2
4.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:S/C:P/I:P/A:P
EPSS
0.003
Percentile
68.1%
Related for UB:CVE-2012-3527