CVE-2010-3662

HIGH

Typo3 < 4.1.14 - SQL Injection

Title source: rule

Description

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows SQL Injection on the backend.

References (3)

Scores

CVSS v3 8.8
EPSS 0.0044
EPSS Percentile 62.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-89
Status published

Affected Products (2)

typo3/typo3 < 4.1.14
typo3/cms-backend < 4.1.14Packagist

Timeline

Published Nov 04, 2019
Tracked Since Feb 18, 2026