Vulnerability Database

314,343

Total vulnerabilities in the database

CVE-2010-5103

SQL injection vulnerability in the list module in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors.

  • Published: May 21, 2012
  • Updated: Nov 9, 2025
  • CVE: CVE-2010-5103
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6
  • AV:N/AC:M/Au:S/C:P/I:P/A:P

CWEs:

OWASP TOP 10:

Software From Fixed in
typo3 / typo3 4.2.10 4.2.10.x
typo3 / typo3 4.3.6 4.3.6.x
typo3 / typo3 4.2.14 4.2.14.x
typo3 / typo3 4.3.5 4.3.5.x
typo3 / typo3 4.3.8 4.3.8.x
typo3 / typo3 4.2.4 4.2.4.x
typo3 / typo3 4.2.5 4.2.5.x
typo3 / typo3 4.2.15 4.2.15.x
typo3 / typo3 4.2.11 4.2.11.x
typo3 / typo3 4.2.0 4.2.0.x
typo3 / typo3 4.3.7 4.3.7.x
typo3 / typo3 4.2.8 4.2.8.x
typo3 / typo3 4.2.13 4.2.13.x
typo3 / typo3 4.2.3 4.2.3.x
typo3 / typo3 4.4.4 4.4.4.x
typo3 / typo3 4.2.1 4.2.1.x
typo3 / typo3 4.3.2 4.3.2.x
typo3 / typo3 4.4.1 4.4.1.x
typo3 / typo3 4.4.2 4.4.2.x
typo3 / typo3 4.2.12 4.2.12.x
typo3 / typo3 4.2.6 4.2.6.x
typo3 / typo3 4.3.0 4.3.0.x
typo3 / typo3 4.2.2 4.2.2.x
typo3 / typo3 4.3.3 4.3.3.x
typo3 / typo3 4.3.4 4.3.4.x
typo3 / typo3 4.3.1 4.3.1.x
typo3 / typo3 4.2.7 4.2.7.x
typo3 / typo3 4.4.3 4.4.3.x
typo3 / typo3 4.2.9 4.2.9.x