CVE-2013-5322: SQL Injection
Published Aug 20, 2013
·Updated
SQL injection vulnerability in the CoolURI extension before 1.0.30 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
23 affected componentsFixes available
Jan Bednarik Cooluri<=1.0.20
Jan Bednarik Cooluri=1.0.11
Jan Bednarik Cooluri=1.0.12
Jan Bednarik Cooluri=1.0.13
Jan Bednarik Cooluri=1.0.14
Jan Bednarik Cooluri=1.0.15
Jan Bednarik Cooluri=1.0.16
Jan Bednarik Cooluri=1.0.17
Jan Bednarik Cooluri=1.0.18
Jan Bednarik Cooluri=1.0.19
Typo3 TYPO3
composer/bednee/cooluri<1.0.30
1.0.30
All of the following
Any of the following
Jan Bednarik Cooluri<=1.0.20
Jan Bednarik Cooluri=1.0.11
Jan Bednarik Cooluri=1.0.12
Jan Bednarik Cooluri=1.0.13
Jan Bednarik Cooluri=1.0.14
Jan Bednarik Cooluri=1.0.15
Jan Bednarik Cooluri=1.0.16
Jan Bednarik Cooluri=1.0.17
Jan Bednarik Cooluri=1.0.18
Jan Bednarik Cooluri=1.0.19
Typo3 TYPO3
Event History
Aug 20, 2013
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
May 17, 2022
Advisory Published
via GitHub·01:32 AM
Frequently Asked Questions
1
What is the severity of CVE-2013-5322?
CVE-2013-5322 is considered a high severity vulnerability due to the potential for remote SQL command execution.
2
How do I fix CVE-2013-5322?
To fix CVE-2013-5322, upgrade the CoolURI extension to version 1.0.30 or later.
3
Who is affected by CVE-2013-5322?
CVE-2013-5322 affects versions of the CoolURI extension prior to 1.0.30 running on TYPO3.
4
What kind of vulnerability is CVE-2013-5322?
CVE-2013-5322 is an SQL injection vulnerability that allows attackers to execute arbitrary SQL commands.
5
Is there a known exploit for CVE-2013-5322?
While there is no public exploit reported for CVE-2013-5322, the nature of SQL injection vulnerabilities typically allows for easy exploitation by attackers.