Lucene search

MitreCVE-2013-4719

HistoryJun 27, 2013 - 8:55 p.m.

CVE-2013-4719

2013-06-2720:55:01

CWE-89

mitre

web.nvd.nist.gov

cve-2013-4719

sql injection

typo3

seo pack

tt_news

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.7

Confidence

Low

EPSS

0.002

Percentile

52.3%

JSON

SQL injection vulnerability in the SEO Pack for tt_news extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected configurations

Nvd

Node

lina_wolfseo_pack_for_tt_newsRange≤1.3.1

lina_wolfseo_pack_for_tt_newsMatch1.0.0

lina_wolfseo_pack_for_tt_newsMatch1.3.0

AND

typo3typo3Match-

VendorProductVersionCPE
lina_wolfseo_pack_for_tt_news*cpe:2.3:a:lina_wolf:seo_pack_for_tt_news:*:*:*:*:*:*:*:*
lina_wolfseo_pack_for_tt_news1.0.0cpe:2.3:a:lina_wolf:seo_pack_for_tt_news:1.0.0:*:*:*:*:*:*:*
lina_wolfseo_pack_for_tt_news1.3.0cpe:2.3:a:lina_wolf:seo_pack_for_tt_news:1.3.0:*:*:*:*:*:*:*
typo3typo3-cpe:2.3:a:typo3:typo3:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
lina_wolf	seo_pack_for_tt_news	*	cpe:2.3:a:lina_wolf:seo_pack_for_tt_news::::::::
lina_wolf	seo_pack_for_tt_news	1.0.0	cpe:2.3:a:lina_wolf:seo_pack_for_tt_news:1.0.0:::::::*
lina_wolf	seo_pack_for_tt_news	1.3.0	cpe:2.3:a:lina_wolf:seo_pack_for_tt_news:1.3.0:::::::*
typo3	typo3	-	cpe:2.3:a:typo3:typo3:-:::::::*

References

secunia.com/advisories/53283

typo3.org/extensions/repository/view/lonewsseo

typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-002/

exchange.xforce.ibmcloud.com/vulnerabilities/81574

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.7

Confidence

Low

EPSS

0.002

Percentile

52.3%

JSON

Related for CVE-2013-4719