NVD Vulnerability Detail

CVE-2015-10106

Summary	UNSUPPORTED WHEN ASSIGNED A vulnerability classified as critical was found in mback2k mh_httpbl Extension up to 1.1.7 on TYPO3. This vulnerability affects the function moduleContent of the file mod1/index.php. The manipulation leads to sql injection. The attack can be initiated remotely. Upgrading to version 1.1.8 is able to address this issue. The patch is identified as 429f50f4e4795b20dae06735b41fb94f010722bf. It is recommended to upgrade the affected component. VDB-230086 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Publication Date	May 28, 2023, 10:15 p.m.
Registration Date	May 29, 2023, 10 a.m.
Last Update	Nov. 21, 2024, 11:24 a.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:mh_httpbl_project:mh_httpbl::::::typo3::*					1.1.8

Related information, measures and tools

No	URL	タグ
1	https://github.com/mback2k/mh_httpbl/commit/429f50f4e4795b20dae06735b41fb94f010722bf	Patch
2	https://github.com/mback2k/mh_httpbl/commit/429f50f4e4795b20dae06735b41fb94f010722bf	Patch
3	https://github.com/mback2k/mh_httpbl/releases/tag/mh_httpbl_1.1.8_security	Release Notes
4	https://github.com/mback2k/mh_httpbl/releases/tag/mh_httpbl_1.1.8_security	Release Notes
5	https://typo3.org/article/typo3-ext-sa-2015-021	Third Party Advisory
6	https://typo3.org/article/typo3-ext-sa-2015-021	Third Party Advisory
7	https://vuldb.com/?ctiid.230086	Permissions Required
8	https://vuldb.com/?ctiid.230086	Permissions Required
9	https://vuldb.com/?id.230086	Permissions Required
10	https://vuldb.com/?id.230086	Permissions Required

Common Vulnerabilities List

JVN Vulnerability Information

mh httpbl project の Typo3 用 mh httpbl における SQL インジェクションの脆弱性

Title	mh httpbl project の Typo3 用 mh httpbl における SQL インジェクションの脆弱性
Summary	サポート外本件は、サポートされていない製品における脆弱性です。 mh httpbl project の Typo3 用 mh httpbl には、SQL インジェクションの脆弱性が存在します。
Possible impacts	情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダアドバイザリまたはパッチ情報が公開されています。参考情報を参照して適切な対策を実施してください。
Publication Date	Sept. 30, 2015, midnight
Registration Date	Nov. 21, 2023, 5:10 p.m.
Last Update	Nov. 21, 2023, 5:10 p.m.

Affected System

mh httpbl project

mh httpbl 1.1.8 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2015-10106	https://www.cve.org/CVERecord?id=CVE-2015-10106
National Vulnerability Database (NVD)
2	CVE-2015-10106	https://nvd.nist.gov/vuln/detail/CVE-2015-10106

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-89	https://jvndb.jvn.jp/ja/cwe/CWE-89.html

その他

No	Name	URL
関連文書
1	github.com (429f50f4e4795b20dae06735b41fb94f010722bf)	https://github.com/mback2k/mh_httpbl/commit/429f50f4e4795b20dae06735b41fb94f010722bf
2	github.com (mh_httpbl_1.1.8_security)	https://github.com/mback2k/mh_httpbl/releases/tag/mh_httpbl_1.1.8_security
3	typo3.org (typo3-ext-sa-2015-021)	https://typo3.org/article/typo3-ext-sa-2015-021

Change Log

No	Changed Details	Date of change
1	[2023年11月21日] 掲載	Nov. 21, 2023, 5:10 p.m.