CVE-2010-4888: SQL Injection
Published Oct 7, 2011
·Updated
SQL injection vulnerability in the Tiny Market (hmtinymarket) extension 0.5.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
2 affected components
Marco Hezel Hm Tinymarket<=0.5.4
Typo3 TYPO3
Event History
Oct 7, 2011
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
10:55 AM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-4888?
CVE-2010-4888 is classified as having a high severity due to its potential to allow remote SQL injection attacks.
2
How do I fix CVE-2010-4888?
To fix CVE-2010-4888, you should upgrade the Tiny Market extension to version 0.5.5 or later.
3
What systems are affected by CVE-2010-4888?
CVE-2010-4888 affects the Tiny Market extension version 0.5.4 and earlier for TYPO3.
4
What are the potential impacts of CVE-2010-4888?
The potential impacts of CVE-2010-4888 include the execution of arbitrary SQL commands and unauthorized access to the database.
5
Is there a patch available for CVE-2010-4888?
Yes, a patch is available through the update to Tiny Market version 0.5.5 or later.