CVE-2010-4068

Published Oct 25, 2010

Last updated 3 months ago

Overview

Description
Unspecified vulnerability in the Extension Manager in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allows remote authenticated administrators to read and possibly modify arbitrary files via a crafted parameter, a different vulnerability than CVE-2010-3714.
Source
cve@mitre.org
NVD status
Modified

Risk scores

CVSS 2.0

Type
Primary
Base score
4.9
Impact score
4.9
Exploitability score
6.8
Vector string
AV:N/AC:M/Au:S/C:P/I:P/A:N

Weaknesses

nvd@nist.gov
CWE-20

Social media

Hype score
Not currently trending

Configurations