SecuritySpace - CVE-2013-7080

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2013-7080

Description: The creating record functionality in Extension table administration library (feuser_adminLib.inc) in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, and 6.0.0 through 6.0.11 allows remote attackers to write to arbitrary fields in the configuration database table via crafted links, aka "Mass Assignment."

Test IDs: 1.3.6.1.4.1.25623.1.0.804209

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2013-7080
Debian Security Information: DSA-2834 (Google Search)
http://www.debian.org/security/2014/dsa-2834
http://seclists.org/oss-sec/2013/q4/473

CVE ID:	CVE-2013-7080
Description:	The creating record functionality in Extension table administration library (feuser_adminLib.inc) in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, and 6.0.0 through 6.0.11 allows remote attackers to write to arbitrary fields in the configuration database table via crafted links, aka "Mass Assignment."
Test IDs:	1.3.6.1.4.1.25623.1.0.804209
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-7080 Debian Security Information: DSA-2834 (Google Search) http://www.debian.org/security/2014/dsa-2834 http://seclists.org/oss-sec/2013/q4/473