CVE-2013-7080
23.12.2013, 23:55
The creating record functionality in Extension table administration library (feuser_adminLib.inc) in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, and 6.0.0 through 6.0.11 allows remote attackers to write to arbitrary fields in the configuration database table via crafted links, aka "Mass Assignment."Enginsight
| Vendor | Product | Version |
|---|---|---|
| typo3 | typo3 | 6.0 |
| typo3 | typo3 | 6.0.1 |
| typo3 | typo3 | 6.0.2 |
| typo3 | typo3 | 6.0.3 |
| typo3 | typo3 | 6.0.4 |
| typo3 | typo3 | 6.0.5 |
| typo3 | typo3 | 6.0.6 |
| typo3 | typo3 | 6.0.7 |
| typo3 | typo3 | 6.0.8 |
| typo3 | typo3 | 6.0.9 |
| typo3 | typo3 | 6.0.10 |
| typo3 | typo3 | 6.0.11 |
| typo3 | typo3 | 4.5.0 |
| typo3 | typo3 | 4.5.1 |
| typo3 | typo3 | 4.5.2 |
| typo3 | typo3 | 4.5.3 |
| typo3 | typo3 | 4.5.4 |
| typo3 | typo3 | 4.5.5 |
| typo3 | typo3 | 4.5.6 |
| typo3 | typo3 | 4.5.7 |
| typo3 | typo3 | 4.5.8 |
| typo3 | typo3 | 4.5.9 |
| typo3 | typo3 | 4.5.10 |
| typo3 | typo3 | 4.5.11 |
| typo3 | typo3 | 4.5.12 |
| typo3 | typo3 | 4.5.13 |
| typo3 | typo3 | 4.5.14 |
| typo3 | typo3 | 4.5.15 |
| typo3 | typo3 | 4.5.16 |
| typo3 | typo3 | 4.5.17 |
| typo3 | typo3 | 4.5.18 |
| typo3 | typo3 | 4.5.19 |
| typo3 | typo3 | 4.5.20 |
| typo3 | typo3 | 4.5.21 |
| typo3 | typo3 | 4.5.22 |
| typo3 | typo3 | 4.5.23 |
| typo3 | typo3 | 4.5.24 |
| typo3 | typo3 | 4.5.25 |
| typo3 | typo3 | 4.5.26 |
| typo3 | typo3 | 4.5.27 |
| typo3 | typo3 | 4.5.28 |
| typo3 | typo3 | 4.5.29 |
| typo3 | typo3 | 4.5.30 |
| typo3 | typo3 | 4.5.31 |
| typo3 | typo3 | 4.7.0 |
| typo3 | typo3 | 4.7.1 |
| typo3 | typo3 | 4.7.2 |
| typo3 | typo3 | 4.7.3 |
| typo3 | typo3 | 4.7.4 |
| typo3 | typo3 | 4.7.5 |
| typo3 | typo3 | 4.7.6 |
| typo3 | typo3 | 4.7.7 |
| typo3 | typo3 | 4.7.8 |
| typo3 | typo3 | 4.7.9 |
| typo3 | typo3 | 4.7.10 |
| typo3 | typo3 | 4.7.11 |
| typo3 | typo3 | 4.7.12 |
| typo3 | typo3 | 4.7.13 |
| typo3 | typo3 | 4.7.14 |
| typo3 | typo3 | 4.7.15 |
| typo3 | typo3 | 4.7.16 |
𝑥
= Vulnerable software versions
Ubuntu Releases
References