CVE-2010-5103
Summary
| CVE | CVE-2010-5103 |
|---|---|
| State | PUBLISHED |
| Assigner | redhat |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2012-05-21 20:55:17 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | SQL injection vulnerability in the list module in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
SingleConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:M/Au:S/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Typo3 | Typo3 | 4.2.0 | All | All | All |
| Application | Typo3 | Typo3 | 4.2.1 | All | All | All |
| Application | Typo3 | Typo3 | 4.2.10 | All | All | All |
| Application | Typo3 | Typo3 | 4.2.11 | All | All | All |
| Application | Typo3 | Typo3 | 4.2.12 | All | All | All |
| Application | Typo3 | Typo3 | 4.2.13 | All | All | All |
| Application | Typo3 | Typo3 | 4.2.14 | All | All | All |
| Application | Typo3 | Typo3 | 4.2.15 | All | All | All |
| Application | Typo3 | Typo3 | 4.2.2 | All | All | All |
| Application | Typo3 | Typo3 | 4.2.3 | All | All | All |
| Application | Typo3 | Typo3 | 4.2.4 | All | All | All |
| Application | Typo3 | Typo3 | 4.2.5 | All | All | All |
| Application | Typo3 | Typo3 | 4.2.6 | All | All | All |
| Application | Typo3 | Typo3 | 4.2.7 | All | All | All |
| Application | Typo3 | Typo3 | 4.2.8 | All | All | All |
| Application | Typo3 | Typo3 | 4.2.9 | All | All | All |
| Application | Typo3 | Typo3 | 4.3.0 | All | All | All |
| Application | Typo3 | Typo3 | 4.3.1 | All | All | All |
| Application | Typo3 | Typo3 | 4.3.2 | All | All | All |
| Application | Typo3 | Typo3 | 4.3.3 | All | All | All |
| Application | Typo3 | Typo3 | 4.3.4 | All | All | All |
| Application | Typo3 | Typo3 | 4.3.5 | All | All | All |
| Application | Typo3 | Typo3 | 4.3.6 | All | All | All |
| Application | Typo3 | Typo3 | 4.3.7 | All | All | All |
| Application | Typo3 | Typo3 | 4.3.8 | All | All | All |
| Application | Typo3 | Typo3 | 4.4.1 | All | All | All |
| Application | Typo3 | Typo3 | 4.4.2 | All | All | All |
| Application | Typo3 | Typo3 | 4.4.3 | All | All | All |
| Application | Typo3 | Typo3 | 4.4.4 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| TYPO3 - the Enterprise Open Source CMS: TYPO3 Security Bulletin TYPO3-SA-2010-022: Multiple vulnerabilities in TYPO3 Core | af854a3a-2127-422b-91ae-364da2661108 | typo3.org | Vendor Advisory |
| TYPO3 Multiple Vulnerabilities - Advisories - Community | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| oss-security - Re: CVE-request: TYPO3 TYPO3-SA-2010-022 still without CVE | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | |
| www.osvdb.org/70117 | af854a3a-2127-422b-91ae-364da2661108 | www.osvdb.org | |
| oss-security - Re: CVE-request: TYPO3 TYPO3-SA-2010-022 still without CVE | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | |
| oss-security - CVE requests: ftpls, xdigger, lbreakout2, calibre, typo3 | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | |
| TYPO3 Core TYPO3-SA-2010-022 Multiple Remote Security Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| oss-security - CVE-request: TYPO3 TYPO3-SA-2010-022 still without CVE | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.