CVE-2010-4961: SQL Injection
Published Oct 9, 2011
·Updated
SQL injection vulnerability in the Webkit PDFs (webkitpdf) extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
13 affected componentsFixes available
Dev-team Typoheads Webkitpdf<=1.1.3
Dev-team Typoheads Webkitpdf=1.0.2
Dev-team Typoheads Webkitpdf=1.1.0
Dev-team Typoheads Webkitpdf=1.1.1
Dev-team Typoheads Webkitpdf=1.1.2
Typo3 TYPO3
composer/dmk/webkitpdf<1.1.4
1.1.4
All of the following
Any of the following
Dev-team Typoheads Webkitpdf<=1.1.3
Dev-team Typoheads Webkitpdf=1.0.2
Dev-team Typoheads Webkitpdf=1.1.0
Dev-team Typoheads Webkitpdf=1.1.1
Dev-team Typoheads Webkitpdf=1.1.2
Typo3 TYPO3
Event History
Oct 9, 2011
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
10:55 AM
DescriptionWeaknessAffected Software
May 17, 2022
Advisory Published
via GitHub·01:56 AM
Frequently Asked Questions
1
What is the severity of CVE-2010-4961?
CVE-2010-4961 is classified as a medium-severity SQL injection vulnerability.
2
How do I fix CVE-2010-4961?
To fix CVE-2010-4961, upgrade the webkitpdf extension to version 1.1.4 or later.
3
Which versions are affected by CVE-2010-4961?
CVE-2010-4961 affects webkitpdf versions up to and including 1.1.3 and specific earlier versions.
4
What can attackers do with CVE-2010-4961?
Attackers exploiting CVE-2010-4961 can execute arbitrary SQL commands on the database.
5
Is TYPO3 itself vulnerable as per CVE-2010-4961?
No, TYPO3 itself is not vulnerable as indicated by CVE-2010-4961.