CVE-2013-7080 in TYPO3
요약 (영어)
The creating record functionality in Extension table administration library (feuser_adminLib.inc) in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, and 6.0.0 through 6.0.11 allows remote attackers to write to arbitrary fields in the configuration database table via crafted links, aka "Mass Assignment."
예약하다
2013. 12. 11.
공개
2013. 12. 23.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 11488 | TYPO3 Table Administration feuser_adminLib.inc 권한 상승 | 358 | 정의되지 않음 | 공식 수정 | CVE-2013-7080 |