TYPO3 Power Extension Manager Unspecified Information Disclosure Vulnerability

Bugtraq ID:	38811
Class:	Unknown
CVE:	CVE-2010-1007
Remote:	Yes
Local:	No
Published:	Mar 17 2010 12:00AM
Updated:	Apr 13 2015 09:02PM
Credit:	Georg Ringer
Vulnerable:	Typo3 Power Extension Manager 1.0.34
Not Vulnerable:

TYPO3 Power Extension Manager Unspecified Information Disclosure Vulnerability

TYPO3 Power Extension Manager ('ch_lightem') is prone to an unspecified information-disclosure vulnerability.

Attackers can exploit this issue to harvest sensitive information that may lead to further attacks.

TYPO3 Power Extension Manager 1.0.34 and prior versions are vulnerable.

Note: This extension is no longer being maintained.

TYPO3 Power Extension Manager Unspecified Information Disclosure Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

TYPO3 Power Extension Manager Unspecified Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

TYPO3 Power Extension Manager Unspecified Information Disclosure Vulnerability

References:

• TYPO3 Collective Security Bulletin TYPO3-SA-2010-006 (TYPO3)
  
• TYPO3 Homepage (TYPO3)