CVE-2013-5302: SQL Injection
Published Aug 16, 2013
·Updated
SQL injection vulnerability in the Faceted Search (kesearch) extension before 1.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
2 affected components
Kennziffer Ke Search<=1.4.0
Typo3 TYPO3
Remediation
Event History
Aug 16, 2013
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-5302?
CVE-2013-5302 is rated as a high severity SQL injection vulnerability.
2
How do I fix CVE-2013-5302?
To fix CVE-2013-5302, upgrade the ke_search extension to version 1.4.1 or above.
3
Who is affected by CVE-2013-5302?
CVE-2013-5302 affects installations of the Faceted Search (ke_search) extension for TYPO3 prior to version 1.4.1.
4
What type of vulnerability is CVE-2013-5302?
CVE-2013-5302 is an SQL injection vulnerability that allows attackers to execute arbitrary SQL commands.
5
Can CVE-2013-5302 be exploited remotely?
Yes, CVE-2013-5302 can be exploited remotely, enabling attackers to compromise the database.