CVE-2010-0334 in Vote For Tt News

Riassunto

di MITRE

SQL injection vulnerability in the Vote rank for news (vote_for_tt_news) extension 1.0.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 15/01/2010
• Divulgazione: 15/01/2010
• Moderazione: accettato
• Voce: VDB-51579
• CPE: pronto
• CWE: CWE-89 (confermato)
• CVSS: 7.5 (NVD)
• EPSS: 0.01021
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2010-0334
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2010-0334
• CVE Details: https://www.cvedetails.com/cve/CVE-2010-0334/