CVE-2010-4887: SQL Injection
SQL injection vulnerability in the Commenting system Backend Module (commentsbe) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4887?
CVE-2010-4887 is classified as a critical severity vulnerability due to its potential to allow remote SQL command execution.
How do I fix CVE-2010-4887?
To fix CVE-2010-4887, update the Commenting system Backend Module (commentsbe) extension to the latest version beyond 0.0.2.
What software is affected by CVE-2010-4887?
CVE-2010-4887 affects TYPO3 installations that use the Commenting system Backend Module (commentsbe) version 0.0.2 and earlier.
Can CVE-2010-4887 be exploited remotely?
Yes, CVE-2010-4887 can be exploited remotely by attackers to execute arbitrary SQL commands.
What is the impact of exploiting CVE-2010-4887?
Exploiting CVE-2010-4887 can lead to unauthorized access to the database allowing attackers to manipulate or extract sensitive information.