Description

SQL injection vulnerability in the list module in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors.

Remediation

References

CVE-2010-5103

Related Vulnerabilities

Sqlite NULL Pointer Dereference Vulnerability (CVE-2019-9937)

WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder Cross-Site Scripting (1.13.56)

WordPress Plugin Insert or Embed Articulate Content into WordPress Directory Traversal (4.2999)

phpBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-1431)

WordPress Plugin Import and export users and customers Multiple Vulnerabilities (1.14.0.2)

Severity

Medium

Classification

CVE-2010-5103 CWE-138

Tags

Missing Update Known Vulnerabilities