CVE-2013-4681: SQL Injection
Published Jun 25, 2013
·Updated
SQL injection vulnerability in the sofortueberweisung2commerce extension before 2.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
2 affected components
Michael Staatz Sofortueberweisung2commerce=2.0.0
Typo3 TYPO3
Event History
Jun 25, 2013
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-4681?
CVE-2013-4681 is classified as a medium severity vulnerability due to the potential for remote code execution through SQL injection.
2
How do I fix CVE-2013-4681?
To fix CVE-2013-4681, update the sofortueberweisung2commerce extension to version 2.0.1 or higher.
3
Who is affected by CVE-2013-4681?
CVE-2013-4681 affects users of the sofortueberweisung2commerce extension prior to version 2.0.1 on TYPO3.
4
What type of vulnerability is CVE-2013-4681?
CVE-2013-4681 is an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands.
5
Can CVE-2013-4681 be exploited remotely?
Yes, CVE-2013-4681 can be exploited remotely, allowing attackers to manipulate the database through unprotected SQL queries.