Webkit PDFs for TYPO3 allows remote attackers to execute arbitrary commands

Description

References

• nvd.nist.gov/vuln/detail/CVE-2010-4962 · ADVISORY
• exchange.xforce.ibmcloud.com/vulnerabilities/61058 · WEB
• DMKEBUSINESSGMBH/webkitpdf · PACKAGE
• web.archive.org/web/20101218181134/http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015 · WEB
• web.archive.org/web/20111015170040/http://www.securityfocus.com/bid/42381 · WEB
• typo3.org/extensions/repository/view/webkitpdf/1.1.4 · WEB
• typo3.org/extensions/repository/view/webkitpdf/1.1.4 · Patch
• typo3.org/teams/security/security-bulletins/typo3-sa-2010-015
• securityfocus.com/bid/42381

dmk/webkitpdf 的其他漏洞

• CVE-2010-4961高危 7.5SQL injection vulnerability in the Webkit PDFs (webkitpdf) extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL…