PT-2011-1888 · Typo3 · Typo3 Jw Calendar Extension

Guide Schmechel · Published 2011-10-09 · Updated 2017-08-29 · CVE-2010-4953

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TYPO3 jw calendar extension versions 1.3.20 and earlier

Description The issue allows remote attackers to execute arbitrary code. The exact vectors used for the attack are not specified.

Recommendations For versions 1.3.20 and earlier, update to a version later than 1.3.20 to resolve the issue.

Fix

Related Identifiers

CVE-2010-4953

Affected Products

Typo3 Jw Calendar Extension

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2010-4953 · Security Note
• http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/61057 · Note