|
|
|
|
| |
Credit:
The information has been provided by Mike Cardwell.
|
| |
Vulnerable Systems:
* phpMyAdmin 3.5.x versions and Prior
Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks. A vulnerability has been reported in the phpMyAdmin extension for TYPO3, which can be exploited by malicious users to bypass certain security restrictions.
The vulnerability is caused due to the extension not properly restricting access to administrative users only, which can be exploited to gain access to the database administration interface by accessing a specially crafted URL. Successful exploitation requires standard TYPO3 backend editor rights. The vulnerability is reported in versions 4.1.0 through 4.8.0.
CVE Information:
CVE-2012-5368
Disclosure Timeline:
Published : Oct 12 2012
Updated : Oct 12 2012
|
|
|
|
|
