Unscored severity · published Aug 16, 2013
CVE-2013-5310
SQL injection vulnerability in the DB Integration (wfqbe) extension before 2.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors
–
CVSS
1.4%
EPSS
No
On KEV
Description
SQL injection vulnerability in the DB Integration (wfqbe) extension before 2.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WF
Wfqbe · Mauro Lorenzutti
through 2.0.0; 1.3.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-5310
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-5310
osvdb.org
http://osvdb.org/95957
typo3.org
http://typo3.org/extension-manuals/wfqbe/2.0.1/view/1/5/
Patch
http://typo3.org/extensions/repository/view/wfqbe
Patch
http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-013
www.securityfocus.com
http://www.securityfocus.com/bid/61653
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/86238
More from Wfqbe
–
CVE-2009-4162
Unspecified vulnerability in the DB Integration (wfqbe) extension 1.3.1 and earlier for TYPO3 allows local users to execute arbitrary commands via unspecified vectors