CVE-2013-4748: SQL Injection
Published Jul 1, 2013
·Updated
SQL injection vulnerability in the News system (news) extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
5 affected componentsFixes available
Georg Ringer News<=1.3.2
Typo3 TYPO3
composer/georgringer/news<1.3.3
1.3.3
All of the following
Georg Ringer News<=1.3.2
Typo3 TYPO3
Event History
Jul 1, 2013
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
May 17, 2022
Advisory Published
via GitHub·01:33 AM
Frequently Asked Questions
1
What is the severity of CVE-2013-4748?
CVE-2013-4748 is considered a high severity vulnerability due to its potential for remote SQL injection attacks.
2
How do I fix CVE-2013-4748?
To fix CVE-2013-4748, upgrade the News system extension to version 1.3.3 or later.
3
What software is affected by CVE-2013-4748?
CVE-2013-4748 affects the News system extension versions prior to 1.3.3 for TYPO3.
4
Who can exploit CVE-2013-4748?
Remote attackers can exploit CVE-2013-4748 to execute arbitrary SQL commands due to insufficient input validation.
5
What types of attacks can CVE-2013-4748 facilitate?
CVE-2013-4748 can facilitate SQL injection attacks, allowing attackers to manipulate the database.