Description

SQL injection vulnerability in the list module in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors.

Remediation

References

CVE-2010-5103

Related Vulnerabilities

Apache HTTP Server Incorrect Authorization Vulnerability (CVE-2014-8109)

Oracle JRE CVE-2012-1725 Vulnerability (CVE-2012-1725)

PHP version older than 5.2.6

Drupal Core 9.2.x Security Bypass (9.2.0 - 9.2.17)

Oracle Database Server CVE-2011-0830 Vulnerability (CVE-2011-0830)

Severity

Medium

Classification

CVE-2010-5103 CWE-138

Tags

Missing Update Known Vulnerabilities