Lucene search

CVE-2010-5104

🗓️ 21 May 2012 20:00:00Reported by redhatType

The escapeStrForLike method in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 does not properly escape input, leading to MySQL database vulnerability

Reporter	Title	Published	Views	Family All 10
OSV	TYPO3 Sensitive Information Disclosure via escapeStrForLike method	17 May 202201:55	–	osv
CVE	CVE-2010-5104	21 May 201220:55	–	cve
CVE	CVE-2012-2349	21 May 201219:55	–	cve
Prion	Code injection	21 May 201220:55	–	prion
NVD	CVE-2010-5104	21 May 201220:55	–	nvd
NVD	CVE-2012-2349	21 May 201219:55	–	nvd
Github Security Blog	TYPO3 Sensitive Information Disclosure via escapeStrForLike method	17 May 202201:55	–	github
UbuntuCve	CVE-2010-5104	21 May 201200:00	–	ubuntucve
Typo3	Multiple vulnerabilities in TYPO3 Core	16 Dec 201000:00	–	typo3
OpenVAS	TYPO3 Multiple Vulnerabilities (Dec 2010)	9 Jan 201400:00	–	openvas

Source	Link
securityfocus	www.securityfocus.com/bid/45470
osvdb	www.osvdb.org/70116
openwall	www.openwall.com/lists/oss-security/2011/01/13/2
typo3	www.typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022/
secunia	www.secunia.com/advisories/35770
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/64185
openwall	www.openwall.com/lists/oss-security/2012/05/11/3
openwall	www.openwall.com/lists/oss-security/2012/05/10/7
openwall	www.openwall.com/lists/oss-security/2012/05/12/5

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 May 2012 20:00Current

5.9Medium risk

Vulners AI Score5.9

EPSS0.007