CVE-2010-1006: SQL Injection
Published Mar 19, 2010
·Updated
SQL injection vulnerability in the Brainstorming extension 0.1.8 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
4 affected components
Typo3 Brainstorming<=0.1.8
Typo3 TYPO3
All of the following
Typo3 Brainstorming<=0.1.8
Typo3 TYPO3
Event History
Mar 19, 2010
CVE Published
via MITRE·06:35 PM
Data Sourced
via MITRE·06:35 PM
Description
Data Sourced
07:00 PM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·07:00 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-1006?
CVE-2010-1006 is considered a high severity vulnerability due to its potential to allow remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2010-1006?
To fix CVE-2010-1006, upgrade the Brainstorming extension to version 0.1.9 or later.
3
What versions of TYPO3 are affected by CVE-2010-1006?
CVE-2010-1006 affects all versions of the Brainstorming extension up to and including 0.1.8.
4
Can CVE-2010-1006 be exploited remotely?
Yes, CVE-2010-1006 can be exploited remotely by attackers who can send crafted SQL commands.
5
What is the primary risk associated with CVE-2010-1006?
The primary risk associated with CVE-2010-1006 is the unauthorized access to the database, which could lead to data theft or manipulation.