medium5.0
CVE-2014-8874
The ke_questionnaire extension 2.5.2 and earlier for TYPO3 uses predictable names for the questionnaire answer forms, which makes it easier for remote attacker…
Impact
The ke_questionnaire extension 2.5.2 and earlier for TYPO3 uses predictable names for the questionnaire answer forms, which makes it easier for remote attackers to obtain sensitive information via a direct request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kennziffer | Ke Questionnaire | through 2.5.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2014/Dec/1
- http://www.securityfocus.com/archive/1/534126/100/0/threaded
- https://www.redteam-pentesting.de/advisories/rt-sa-2014-009
- http://seclists.org/fulldisclosure/2014/Dec/1
- http://www.securityfocus.com/archive/1/534126/100/0/threaded
- https://www.redteam-pentesting.de/advisories/rt-sa-2014-009