Project

General

Profile

Actions

Bug #42651

closed

Information disclosure in adodb/

Added by Georg Ringer about 12 years ago. Updated about 6 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
-
Target version:
-
Start date:
2012-11-02
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
6.0
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

not fully tested but IMO it possible to select any data from any table within TYPO3\CMS\Adodb\View\CheckConnectionWizardView, just a be login needs to be needed

entry point: www.domain.tld/typo3/sysext/adodb/checkconnectionwizard.php?P[table]=tx_datasources_datasource


Related issues 1 (0 open1 closed)

Related to TYPO3 Core - Task #54078: ext:adodb Remove obsolete diffs from doc/Closed2013-11-29

Actions
Actions

Also available in: Atom PDF