CVE-2010-5102

TYPO3 <4.2.16-4.4.5 - Path Traversal

Title source: llm
STIX 2.1

Description

Directory traversal vulnerability in mod/tools/em/class.em_unzip.php in the unzip library in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote attackers to write arbitrary files via unspecified vectors.

References (11)

Core 11
Core References
Various Sources x_refsource_misc
http://bugs.typo3.org/view.php?id=16362
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/70119
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/45470
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/64180
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35770
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/05/12/5
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2011/01/13/2
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/05/11/3
Various Sources x_refsource_misc
http://securesystems.ca/advisory.php?id=2010-001
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/05/10/7

Scores

EPSS 0.0061
EPSS Percentile 69.9%

Details

CWE
CWE-22
Status published
Products (29)
typo3/typo3 4.2.0
typo3/typo3 4.2.1
typo3/typo3 4.2.2
typo3/typo3 4.2.3
typo3/typo3 4.2.4
typo3/typo3 4.2.5
typo3/typo3 4.2.6
typo3/typo3 4.2.7
typo3/typo3 4.2.8
typo3/typo3 4.2.9
... and 19 more
Published May 21, 2012
Tracked Since Feb 18, 2026