CVE-2013-5310: SQL Injection
Published Aug 16, 2013
·Updated
SQL injection vulnerability in the DB Integration (wfqbe) extension before 2.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
3 affected components
Mauro Lorenzutti Wfqbe<=2.0.0
Mauro Lorenzutti Wfqbe=1.3.1
Typo3 TYPO3
Remediation
Patch Available
Event History
Aug 16, 2013
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-5310?
CVE-2013-5310 is classified as a high severity vulnerability due to its potential for remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2013-5310?
To fix CVE-2013-5310, upgrade the DB Integration (wfqbe) extension to version 2.0.1 or later.
3
Which versions are affected by CVE-2013-5310?
CVE-2013-5310 affects all versions of the wfqbe extension prior to 2.0.1.
4
What type of attack can exploit CVE-2013-5310?
CVE-2013-5310 can be exploited through SQL injection attacks that allow execution of arbitrary SQL commands.
5
Is TYPO3 itself vulnerable due to CVE-2013-5310?
No, TYPO3 itself is not vulnerable; the vulnerability lies specifically within the wfqbe extension.