CVE-2010-4952

no score yetEPSS 1.1%

SQL injection vulnerability in the FE user statistic (festat) extension before 0.2.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2011-10-09
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

joachim_ruhs:festat

References

http://typo3.org/extensions/repository/view/festat/0.2.4/
http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/
http://www.securityfocus.com/bid/42366
https://exchange.xforce.ibmcloud.com/vulnerabilities/61056
http://typo3.org/extensions/repository/view/festat/0.2.4/

Check your stack JSON