#VU44059 Information disclosure in TYPO3 - CVE-2010-5104

Vulnerability identifier: #VU44059

Vulnerability risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2010-5104

CWE-ID: CWE-200

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
TYPO3
Web applications / CMS

Vendor: TYPO3

Description

The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.

The escapeStrForLike method in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 does not properly escape input when the MySQL database is set to sql_mode NO_BACKSLASH_ESCAPES, which allows remote attackers to obtain sensitive information via wildcard characters in a LIKE query.

Mitigation
Install update from vendor's website.

Vulnerable software versions

TYPO3: 4.2.0 - 4.4.4

---

External links
https://secunia.com/advisories/35770
https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022/
https://www.openwall.com/lists/oss-security/2011/01/13/2
https://www.openwall.com/lists/oss-security/2012/05/10/7
https://www.openwall.com/lists/oss-security/2012/05/11/3
https://www.openwall.com/lists/oss-security/2012/05/12/5
https://www.osvdb.org/70116
https://www.securityfocus.com/bid/45470
https://exchange.xforce.ibmcloud.com/vulnerabilities/64185

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.