Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2010-5099

The fileDenyPattern functionality in the PHP file inclusion protection API in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 does not properly filter file types, which allows remote attackers to bypass intended access restrictions and access arbitrary PHP files, as demonstrated using path traversal sequences with %00 null bytes and CVE-2010-3714 to read the TYPO3 encryption key from localconf.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.052
EPSS Ranking 89.4%
CVSS Severity
CVSS v2 Score 6.8
References
Products affected by CVE-2010-5099
  • Typo3 » Typo3 » Version: 4.2.0
    cpe:2.3:a:typo3:typo3:4.2.0
  • Typo3 » Typo3 » Version: 4.2.1
    cpe:2.3:a:typo3:typo3:4.2.1
  • Typo3 » Typo3 » Version: 4.2.10
    cpe:2.3:a:typo3:typo3:4.2.10
  • Typo3 » Typo3 » Version: 4.2.11
    cpe:2.3:a:typo3:typo3:4.2.11
  • Typo3 » Typo3 » Version: 4.2.12
    cpe:2.3:a:typo3:typo3:4.2.12
  • Typo3 » Typo3 » Version: 4.2.13
    cpe:2.3:a:typo3:typo3:4.2.13
  • Typo3 » Typo3 » Version: 4.2.14
    cpe:2.3:a:typo3:typo3:4.2.14
  • Typo3 » Typo3 » Version: 4.2.15
    cpe:2.3:a:typo3:typo3:4.2.15
  • Typo3 » Typo3 » Version: 4.2.2
    cpe:2.3:a:typo3:typo3:4.2.2
  • Typo3 » Typo3 » Version: 4.2.3
    cpe:2.3:a:typo3:typo3:4.2.3
  • Typo3 » Typo3 » Version: 4.2.4
    cpe:2.3:a:typo3:typo3:4.2.4
  • Typo3 » Typo3 » Version: 4.2.5
    cpe:2.3:a:typo3:typo3:4.2.5
  • Typo3 » Typo3 » Version: 4.2.6
    cpe:2.3:a:typo3:typo3:4.2.6
  • Typo3 » Typo3 » Version: 4.2.7
    cpe:2.3:a:typo3:typo3:4.2.7
  • Typo3 » Typo3 » Version: 4.2.8
    cpe:2.3:a:typo3:typo3:4.2.8
  • Typo3 » Typo3 » Version: 4.2.9
    cpe:2.3:a:typo3:typo3:4.2.9
  • Typo3 » Typo3 » Version: 4.3.0
    cpe:2.3:a:typo3:typo3:4.3.0
  • Typo3 » Typo3 » Version: 4.3.1
    cpe:2.3:a:typo3:typo3:4.3.1
  • Typo3 » Typo3 » Version: 4.3.2
    cpe:2.3:a:typo3:typo3:4.3.2
  • Typo3 » Typo3 » Version: 4.3.3
    cpe:2.3:a:typo3:typo3:4.3.3
  • Typo3 » Typo3 » Version: 4.3.4
    cpe:2.3:a:typo3:typo3:4.3.4
  • Typo3 » Typo3 » Version: 4.3.5
    cpe:2.3:a:typo3:typo3:4.3.5
  • Typo3 » Typo3 » Version: 4.3.6
    cpe:2.3:a:typo3:typo3:4.3.6
  • Typo3 » Typo3 » Version: 4.3.7
    cpe:2.3:a:typo3:typo3:4.3.7
  • Typo3 » Typo3 » Version: 4.3.8
    cpe:2.3:a:typo3:typo3:4.3.8
  • Typo3 » Typo3 » Version: 4.4.0
    cpe:2.3:a:typo3:typo3:4.4.0
  • Typo3 » Typo3 » Version: 4.4.1
    cpe:2.3:a:typo3:typo3:4.4.1
  • Typo3 » Typo3 » Version: 4.4.2
    cpe:2.3:a:typo3:typo3:4.4.2
  • Typo3 » Typo3 » Version: 4.4.3
    cpe:2.3:a:typo3:typo3:4.4.3
  • Typo3 » Typo3 » Version: 4.4.4
    cpe:2.3:a:typo3:typo3:4.4.4


Products
Pricing
Contact Us

Shodan ® - All rights reserved