CVE-2013-4720: SQL Injection
Published Jun 27, 2013
·Updated
SQL injection vulnerability in the WEC Discussion Forum extension before 2.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
12 affected components
Webempoweredchurch Wec Discussion<=2.1.1
Webempoweredchurch Wec Discussion=1.6.0
Webempoweredchurch Wec Discussion=1.6.1
Webempoweredchurch Wec Discussion=1.6.2
Webempoweredchurch Wec Discussion=1.6.3
Webempoweredchurch Wec Discussion=1.7.0
Webempoweredchurch Wec Discussion=2.0.1
Webempoweredchurch Wec Discussion=2.0.2
Webempoweredchurch Wec Discussion=2.0.3
Webempoweredchurch Wec Discussion=2.0.4
Webempoweredchurch Wec Discussion=2.1.0
Typo3 TYPO3
Remediation
Patch Available
Event History
Jun 27, 2013
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-4720?
CVE-2013-4720 is considered a medium severity vulnerability due to the potential for remote SQL injection attacks.
2
How do I fix CVE-2013-4720?
To fix CVE-2013-4720, upgrade the WEC Discussion Forum extension to version 2.1.2 or later.
3
What versions of TYPO3 are affected by CVE-2013-4720?
CVE-2013-4720 affects WEC Discussion Forum versions up to 2.1.1 and all versions from 1.6.0 to 2.1.1.
4
What kind of attacks are possible with CVE-2013-4720?
CVE-2013-4720 allows remote attackers to execute arbitrary SQL commands, potentially compromising the database.
5
Is there a workaround for CVE-2013-4720?
There is no official workaround for CVE-2013-4720, so updating to a patched version is recommended.