CVE-2011-4614

概要

参考情報

• secunia.com/advisories/47201 · Vendor Advisory
• typo3.org/fileadmin/security-team/bug32571/32571.diff
• typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2011-004 · Patch
• openwall.com/lists/oss-security/2011/12/16/1
• osvdb.org/77776

typo3 のその他の脆弱性

• CVE-2026-6553高 7.5Changing backend users' passwords via the user settings module results in storing the cleartext password in the uc and user_settings fields …
• CVE-2026-0859高 7.8TYPO3's mail‑file spool deserialization flaw lets local users with write access to the spool directory craft a malicious file that is deseri…
• CVE-2025-59022高 8.1Backend users who had access to the recycler module could delete arbitrary data from any database table defined in the TCA - regardless of w…
• CVE-2025-59021中 6.4Backend users with access to the redirects module and write permission on the sys_redirect table were able to read, create, and modify any r…
• CVE-2025-59020中 6.5By exploiting the defVals parameter, attackers could bypass field‑level access checks during record creation in the TYPO3 backend. This gave…