CVE-2010-1153 - PHP remote file inclusion vulnerability in the autoloader in TYPO3 4.3.x before 4.3.3 allows remote attackers to execute arbitrary PHP code via a URL in an input field associated with the className variable

Back Back to CVE browser

HIGH

PHP remote file inclusion vulnerability in the autoloader in TYPO3 4.3.x before 4.3.3 allows remote attackers to execute arbitrary PHP code via a URL in an input field associated with the className variable

Published Apr 20, 2010

8.9

HIGH

CVSS 4.0

EPSS 1.16%

Description

PHP remote file inclusion vulnerability in the autoloader in TYPO3 4.3.x before 4.3.3 allows remote attackers to execute arbitrary PHP code via a URL in an input field associated with the className variable.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (6)

http://marc.info/?l=oss-security&m=127092306209177&w=2
mailing-listx_refsource_MLIST
http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-008/
x_refsource_CONFIRMVendor Advisory
http://www.openwall.com/lists/oss-security/2010/04/12/1
mailing-listx_refsource_MLIST
https://github.com/advisories/GHSA-4h9j-f98m-p4hg
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2010-1153
https://web.archive.org/web/20100813082506/http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-008

Link	Providers	Tags
http://marc.info/?l=oss-security&m=127092306209177&w=2		mailing-listx_refsource_MLIST
http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-008/		x_refsource_CONFIRMVendor Advisory
http://www.openwall.com/lists/oss-security/2010/04/12/1		mailing-listx_refsource_MLIST
https://github.com/advisories/GHSA-4h9j-f98m-p4hg		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2010-1153
https://web.archive.org/web/20100813082506/http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-008