CVE-2010-5103

Description

SQL injection vulnerability in the list module in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/64184

http://www.securityfocus.com/bid/45470

http://www.osvdb.org/70117

http://www.openwall.com/lists/oss-security/2012/05/12/5

http://www.openwall.com/lists/oss-security/2012/05/11/3

http://www.openwall.com/lists/oss-security/2012/05/10/7

http://www.openwall.com/lists/oss-security/2011/01/13/2

http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022/

http://secunia.com/advisories/35770

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS