CVE-2013-4745: SQL Injection
Published Jul 1, 2013
·Updated
SQL injection vulnerability in the My quiz and poll (myquizpoll) extension before 2.0.6 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
19 affected components
Kurt Gusbeth Myquizpoll<=1.4.0
Kurt Gusbeth Myquizpoll=0.1.1
Kurt Gusbeth Myquizpoll=0.1.2
Kurt Gusbeth Myquizpoll=0.1.3
Kurt Gusbeth Myquizpoll=0.1.4
Kurt Gusbeth Myquizpoll=0.1.5
Kurt Gusbeth Myquizpoll=0.1.6
Kurt Gusbeth Myquizpoll=0.1.7
Kurt Gusbeth Myquizpoll=0.2.0
Kurt Gusbeth Myquizpoll=0.2.1
Kurt Gusbeth Myquizpoll=0.2.2
Kurt Gusbeth Myquizpoll=0.3.0
Kurt Gusbeth Myquizpoll=0.4.0
Kurt Gusbeth Myquizpoll=1.0.0
Kurt Gusbeth Myquizpoll=1.0.1
Kurt Gusbeth Myquizpoll=1.1.0
Kurt Gusbeth Myquizpoll=1.2.0
Kurt Gusbeth Myquizpoll=1.3.0
Typo3 TYPO3
Event History
Jul 1, 2013
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-4745?
CVE-2013-4745 is classified as a medium severity vulnerability due to its potential for remote SQL command execution.
2
How do I fix CVE-2013-4745?
To fix CVE-2013-4745, update the My quiz and poll extension to version 2.0.6 or later.
3
Which versions of My quiz and poll are affected by CVE-2013-4745?
CVE-2013-4745 affects My quiz and poll versions prior to 2.0.6, including all versions up to and including 1.4.0.
4
Can CVE-2013-4745 be exploited remotely?
Yes, CVE-2013-4745 can be exploited remotely, allowing attackers to execute arbitrary SQL commands.
5
Who is the vendor for the My quiz and poll extension related to CVE-2013-4745?
The My quiz and poll extension related to CVE-2013-4745 is developed by Kurt Gusbeth.