CVE-2010-0798

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in the T3BLOG extension 0.6.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/38388Vendor Advisory
http://typo3.org/extensions/repository/view/t3blog/0.8.0/Patch
http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-002/Patch, Vendor Advisory
http://www.securityfocus.com/bid/38030
http://secunia.com/advisories/38388Vendor Advisory
http://typo3.org/extensions/repository/view/t3blog/0.8.0/Patch
http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-002/Patch, Vendor Advisory
http://www.securityfocus.com/bid/38030

Timeline

Published: Mar 2, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-07995.0Directory traversal vulnerability in misc/tell_a_friend/tell.php in phpunity.newsmanager allows remote attackers to read arbitrary files via CVE-2010-08007.5SQL injection vulnerability in the Ossolution Team Documents Seller (aka DMS) (com_dms) component 2.5.1 for Joomla! allows remote attackers CVE-2010-08013.5Directory traversal vulnerability in the AutartiTarot (com_autartitarot) component 1.0.3 for Joomla! allows remote authenticated users, with CVE-2010-08027.5SQL injection vulnerability in index.php in (nv2) Awards 1.1.0, a modification for Invision Power Board, allows remote attackers to execute CVE-2010-08037.5SQL injection vulnerability in the jVideoDirect (com_jvideodirect) component 1.1 RC3b for Joomla! allows remote attackers to execute arbitra CVE-2010-08044.3Cross-site scripting (XSS) vulnerability in index.php in iBoutique 4.0 allows remote attackers to inject arbitrary web script or HTML via th CVE-2010-08059.3The Tabular Data Control (TDC) ActiveX control in Microsoft Internet Explorer 5.01 SP4, 6 on Windows XP SP2 and SP3, and 6 SP1 allows remote CVE-2010-08068.8Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote at CVE-2010-08079.3Microsoft Internet Explorer 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi CVE-2010-08082.6Microsoft Internet Explorer 6 and 7 on Windows XP and Vista does not prevent script from simulating user interaction with the AutoComplete f CVE-2010-08104.7The kernel in Microsoft Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, does not properly handle unspecified excepti CVE-2010-08119.3Multiple unspecified vulnerabilities in the Microsoft Internet Explorer 8 Developer Tools ActiveX control in Microsoft Windows 2000 SP4, Win