SQL Injection in Typo3

CVE-2010-5103

SQL injection vulnerability in the list module in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors.

Vulnerability class: SQL Injection

EPSS: 0.013 (67.9th percentile) — read the EPSS interpretation.

Affected products

  • Typo3 — versions 4.2.0, 4.2.1, 4.2.2
  • N/a — versions n/a

Weakness classification (CWE)

References