CVE-2010-0798: SQL Injection
Published Mar 2, 2010
·Updated
SQL injection vulnerability in the T3BLOG extension 0.6.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
10 affected components
Snowflake T3blog<=0.6.2
Snowflake T3blog=0.5.0
Snowflake T3blog=0.6.0
Snowflake T3blog=0.6.1
Typo3 TYPO3
All of the following
Any of the following
Snowflake T3blog<=0.6.2
Snowflake T3blog=0.5.0
Snowflake T3blog=0.6.0
Snowflake T3blog=0.6.1
Typo3 TYPO3
Remediation
Patch Available
Event History
Mar 2, 2010
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Data Sourced
08:30 PM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·08:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-0798?
CVE-2010-0798 has a severity rating that indicates it can allow remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2010-0798?
To fix CVE-2010-0798, upgrade the T3BLOG extension to version 0.8.0 or later.
3
Which versions of T3BLOG are affected by CVE-2010-0798?
CVE-2010-0798 affects T3BLOG versions 0.6.2 and earlier, including versions 0.5.0, 0.6.0, and 0.6.1.
4
Can TYPO3 itself be exploited through CVE-2010-0798?
CVE-2010-0798 specifically affects the T3BLOG extension and does not pose a vulnerability directly to TYPO3.
5
What type of vulnerability is CVE-2010-0798?
CVE-2010-0798 is classified as an SQL injection vulnerability.