GitHub Advisoryadvisory · Packagist

GHSA-r2w2-2r2x-fpcx TYPO3 SQL Injection vulnerability

MEDIUM Published 2022-05-17 Modified 2025-04-12 Official page ↗
Aliases
CVE-2010-5103
Ecosystem
Packagist
Packages
typo3/cms
Severity
Moderate
Weaknesses
CWE-89
Reviewed
2025-04-12

Affected packages

• Packagist typo3/cms: >= 4.2.0, < 4.2.16 → fixed in 4.2.16 • Packagist typo3/cms: >= 4.3.0, < 4.3.9 → fixed in 4.3.9 • Packagist typo3/cms: >= 4.4.0, < 4.4.5 → fixed in 4.4.5

Description

SQL injection vulnerability in the list module in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors.

Related

Alias · CVE (1)

  • CVE-2010-5103 SQL injection vulnerability in the list module in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote… vulnerability

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References