CVE-2010-4950: SQL Injection
Published Oct 9, 2011
·Updated
SQL injection vulnerability in the Event (event) extension before 0.3.7 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
6 affected components
Joachim Ruhs Event<=0.3.4
Joachim Ruhs Event=0.2.2
Joachim Ruhs Event=0.2.4
Joachim Ruhs Event=0.2.5
Joachim Ruhs Event=0.2.7
Typo3 TYPO3
Remediation
Patch Available
Event History
Oct 9, 2011
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
10:55 AM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-4950?
CVE-2010-4950 has a medium severity rating due to its potential for SQL injection attacks.
2
How do I fix CVE-2010-4950?
To fix CVE-2010-4950, upgrade the Event extension to version 0.3.7 or later.
3
Which versions of the Event extension are affected by CVE-2010-4950?
CVE-2010-4950 affects Event extension versions prior to 0.3.7, including 0.2.2 to 0.3.4.
4
Can CVE-2010-4950 lead to unauthorized access?
Yes, CVE-2010-4950 may allow unauthorized remote attackers to execute arbitrary SQL commands.
5
Is TYPO3 itself vulnerable in relation to CVE-2010-4950?
No, TYPO3 itself is not vulnerable to CVE-2010-4950; the vulnerability specifically lies within the Event extension.