CVE-2008-4188

EUVD-2008-4171
Unspecified vulnerability in the TYPO3 Secure Directory (kw_secdir) extension before 1.0.2 allows remote attackers to execute arbitrary code via unknown vectors related to "injection of control characters."
Code Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 87%
Affected Products (NVD)
VendorProductVersion
typo3secure_directory
𝑥
≤ 1.0.1
typo3secure_directory
0.1.3
typo3secure_directory
1.0.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/31897
http://typo3.org/extensions/repository/view/kw_secdir/1.0.2/
http://www.securityfocus.com/bid/31253
https://exchange.xforce.ibmcloud.com/vulnerabilities/45260
http://secunia.com/advisories/31897
http://typo3.org/extensions/repository/view/kw_secdir/1.0.2/
http://www.securityfocus.com/bid/31253
https://exchange.xforce.ibmcloud.com/vulnerabilities/45260