CVE-2013-5306: SQL Injection
Published Aug 16, 2013
·Updated
SQL injection vulnerability in the Browser - TYPO3 without PHP (browser) extension before 4.5.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
3 affected components
Die-netzmacher Browser<=4.5.2
Die-netzmacher Browser=4.5.0
Typo3 TYPO3
Remediation
Patch Available
Event History
Aug 16, 2013
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-5306?
CVE-2013-5306 is classified as a medium severity vulnerability due to its potential for SQL injection and remote code execution.
2
How do I fix CVE-2013-5306?
To mitigate CVE-2013-5306, upgrade the Browser - TYPO3 extension to version 4.5.5 or later.
3
What kind of attacks can be performed using CVE-2013-5306?
CVE-2013-5306 allows attackers to execute arbitrary SQL commands through SQL injection vulnerability.
4
Which versions of Browser - TYPO3 are affected by CVE-2013-5306?
CVE-2013-5306 affects Browser - TYPO3 versions before 4.5.5, including 4.5.0 and up to 4.5.2.
5
Is TYPO3 itself vulnerable according to CVE-2013-5306?
No, the TYPO3 core itself is not vulnerable according to CVE-2013-5306; the vulnerability is related specifically to the Browser - TYPO3 extension.