Back to Database
Status published
Medium
CVE-2011-4614
PHP remote file inclusion vulnerability in Classes/Controller/AbstractController.php in the workspaces...
Vulnerability Description
PHP remote file inclusion vulnerability in Classes/Controller/AbstractController.php in the workspaces system extension in TYPO3 4.5.x before 4.5.9, 4.6.x before 4.6.2, and development versions of 4.7 allows remote attackers to execute arbitrary PHP code via a URL in the BACK_PATH parameter.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2011-4614
Credits & Attribution
No credits recorded in the NVD database.
References
More from typo3
View All →CVE-2020-8091
svg.swf in TYPO3 6.2.0 to 6.2.38 ELTS and 7.0.0 to...
Medium
4.8
CVE-2019-19850
An issue was discovered in TYPO3 before 8.7.30, 9.x before...
Medium
5.5
CVE-2019-19849
An issue was discovered in TYPO3 before 8.7.30, 9.x before...
High
8.8
CVE-2019-19848
An issue was discovered in TYPO3 before 8.7.30, 9.x before...
Medium
6.8
CVE-2019-12748
TYPO3 8.3.0 through 8.7.26 and 9.0.0 through 9.5.7 allows XSS....
Medium
6.1
Affected Vendor
typo3
View all reports →Affected Software
typo3
Vulnerable Versions:
4.5, 4.5.1, 4.5.2, 4.5.3, 4.5.4, 4.5.5, 4.5.6, 4.5.7, 4.5.8, 4.6, 4.6.1
Timeline
Official Publish:
February 18th, 2012
Last Modified:
September 17th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.