CVE-2013-4870: SQL Injection
Published Jul 18, 2013
·Updated
SQL injection vulnerability in the News Search (newssearch) extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
2 affected components
News Search Project News Search=0.1.0
Typo3 TYPO3
Event History
Jul 18, 2013
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-4870?
CVE-2013-4870 has a high severity rating due to its potential for SQL injection attacks.
2
How do I fix CVE-2013-4870?
To fix CVE-2013-4870, update the News Search extension to a version that addresses the SQL injection vulnerability.
3
What type of attack is possible with CVE-2013-4870?
CVE-2013-4870 allows attackers to execute arbitrary SQL commands, potentially compromising the database.
4
Which version of the News Search extension is impacted by CVE-2013-4870?
CVE-2013-4870 affects version 0.1.0 of the News Search extension.
5
Is TYPO3 itself vulnerable due to CVE-2013-4870?
No, the vulnerability is specific to the News Search extension and not the TYPO3 core itself.