Vulnerability advisory
GHSA-r2w2-2r2x-fpcx
TYPO3 SQL Injection vulnerability
Also known as CVE-2010-5103
Severity
Severity not reported.
Affected versions
typo3/cms Packagist
All typo3/cms advisories →| Affected | Fixed in |
|---|---|
4.2.0 to before 4.2.16 | 4.2.16Advisories → |
4.3.0 to before 4.3.9 | 4.3.9Advisories → |
4.4.0 to before 4.4.5 | 4.4.5Advisories → |
Description
SQL injection vulnerability in the list module in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors.
References
- Advisorynvd.nist.gov/vuln/detail/CVE-2010-5103 ↗
- Webexchange.xforce.ibmcloud.com/vulnerabilities/64184 ↗
- Packagegithub.com/TYPO3/typo3 ↗
- Webweb.archive.org/web/20120123102224/http://www.securityfocus.com/bid/45470 ↗
- Webweb.archive.org/web/20120801235059/http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022 ↗
- Webwww.openwall.com/lists/oss-security/2011/01/13/2 ↗
- Webwww.openwall.com/lists/oss-security/2012/05/10/7 ↗
- Webwww.openwall.com/lists/oss-security/2012/05/11/3 ↗
- Webwww.openwall.com/lists/oss-security/2012/05/12/5 ↗